StackRadar

CVE-2026-29181

High

Advisory

Published 7 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.008
54th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
344
of 17,781 indexed, latest versions
Container images
339
deployed by those charts
Fix available
1 of 1
affected package

OpenTelemetry-Go: multi-value `baggage` header extraction causes excessive allocations (remote dos amplification)

Carried by container images the latest versions of 344 of 17,781 indexed charts deploy, on 339 images.

Affected packageAffected versionsFixed inImages
go.opentelemetry.io/otelgolangv1.36.0, v1.37.0, v1.38.0, v1.39.0+2 more1.41.0339
OSV records
GHSA-mh2q-q3fh-2475
Also known as
GO-2026-5506

Charts affected

344 by stars
ChartLatestAffected imagesRadar Score
batchrunnerflanksourceVerified publisher1.0.441 of 1See more

batchrunner flanksource 1.0.44

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
flanksource/batch-runner:v1.0.44689687a7cf95
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

5,292
mission-controlflanksourceVerified publisher0.1.3362 of 8See more

mission-control flanksource 0.1.336

2 of the 8 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/flanksource/postgres:17.6-497383cebcf66281fc1
go.opentelemetry.io/otel@v1.38.0
1.41.0
public.ecr.aws/k4y9r6y5/kratos:v25.4.0e8014c6c58b6
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

8,902
gameserver-operatorgameserver-operator0.3.01 of 1See more

gameserver-operator gameserver-operator 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/idebeijer/gameserver-operator:latest1b099cfe9e5e
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

369
skypilotgeek-cookbookVerified publisher0.0.11 of 3See more

skypilot geek-cookbook 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.11.8695d79381ee6
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

8,923
glassflow-etlglassflowVerified publisher0.5.212 of 16See more

glassflow-etl glassflow 0.5.21

2 of the 16 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/glassflow/glassflow-etl-k8s-operator:v3.2.1e70364e88629
go.opentelemetry.io/otel@v1.38.0
1.41.0
ghcr.io/glassflow/glassflow-etl-migration:v3.2.07db1a1bf3dae
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

12,056
glassflow-operatorglassflow-operatorVerified publisher0.8.51 of 3See more

glassflow-operator glassflow-operator 0.8.5

1 of the 3 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/glassflow/glassflow-etl-k8s-operator:v3.2.1e70364e88629
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

763
glauthglauthVerified publisher0.3.171 of 2See more

glauth glauth 0.3.17

1 of the 2 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/nnstd/glauth:2.52e6e09fa77dd
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

2,587
gnp-stackgnp-stack0.0.53 of 14See more

gnp-stack gnp-stack 0.0.5

3 of the 14 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/grafana:12.2.135c41e0fd029
go.opentelemetry.io/otel@v1.37.0
1.41.0
ghcr.io/openconfig/gnmic:0.45.0d422a9ebd4a2
go.opentelemetry.io/otel@v1.40.0
1.41.0
quay.io/prometheus-operator/prometheus-operator:v0.85.0890b3bb05cf4
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

7,659
goldpingergoldpinger1.1.21 of 1See more

goldpinger goldpinger 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
bloomberg/goldpinger:3.11.2a1fb87c2e9d9
go.opentelemetry.io/otel@v1.39.0
1.41.0

Open the chart page →

280
harborgpg-dev1.18.34 of 8See more

harbor gpg-dev 1.18.3

4 of the 8 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
goharbor/harbor-core:v2.14.3a30e5a8be3d9
go.opentelemetry.io/otel@v1.40.0
1.41.0
goharbor/harbor-jobservice:v2.14.3e2b0298e894d
go.opentelemetry.io/otel@v1.40.0
1.41.0
goharbor/harbor-registryctl:v2.14.3ddf6bb429eb6
go.opentelemetry.io/otel@v1.40.0
1.41.0
goharbor/trivy-adapter-photon:v2.14.35c6f7162804c
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

3,376
kube-prometheus-stackgpg-dev84.0.01 of 6See more

kube-prometheus-stack gpg-dev 84.0.0

1 of the 6 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

4,288
prometheusgpg-dev29.2.11 of 6See more

prometheus gpg-dev 29.2.1

1 of the 6 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

3,261
thanosgpg-dev0.5.31 of 1See more

thanos gpg-dev 0.5.3

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
thanosio/thanos:v0.41.0cf3e9b292e43
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

592
velerogpg-dev12.0.01 of 1See more

velero gpg-dev 12.0.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
velero/velero:v1.18.0e4d1e79be2ee
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

1,546
grafana-cloud-onboardinggrafana0.4.73 of 5See more

grafana-cloud-onboarding grafana 0.4.7

3 of the 5 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/beyla-k8s-cache:253b2f561cb1b
go.opentelemetry.io/otel@v1.39.0
1.41.0
ghcr.io/grafana/alloy-operator:1.8.1ae85d68749c7
go.opentelemetry.io/otel@v1.40.0
1.41.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

4,637
grafana-samplinggrafana1.1.71 of 2See more

grafana-sampling grafana 1.1.7

1 of the 2 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/alloy:v1.11.38c7256f412fe
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

3,318
pyroscope-monitoringgrafana0.1.12 of 6See more

pyroscope-monitoring grafana 0.1.1

2 of the 6 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/otel-lgtm:0.11.1009d8c3ce4f3a
go.opentelemetry.io/otel@v1.36.0
1.41.0
ghcr.io/grafana/alloy-operator:1.3.02088dcb22aaa
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

8,188
routergroundcover1.12.3572 of 7See more

router groundcover 1.12.357

2 of the 7 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
public.ecr.aws/groundcovercom/grafana-groundcover:v0.0.54-grafana11.3.7ee9d973e3952
go.opentelemetry.io/otel@v1.40.0
1.41.0
public.ecr.aws/groundcovercom/kong/kubernetes-ingress-controller:3.5.3-20260205bf9db911deed
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

6,009
hakoniwahakoniwa0.1.01 of 1See more

hakoniwa hakoniwa 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/aplulu/hakoniwa:0.1.0accf0b921388
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

338
monitoring-stackhelm-charts-alexis-carbillet0.1.01 of 11See more

monitoring-stack helm-charts-alexis-carbillet 0.1.0

1 of the 11 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

9,460
appwritehelmforgeVerified publisher1.3.41 of 5See more

appwrite helmforge 1.3.4

1 of the 5 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
appwrite/appwrite:1.9.6adc7d0e7ec23
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

6,952
castopodhelmforgeVerified publisher1.2.71 of 3See more

castopod helmforge 1.2.7

1 of the 3 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
castopod/castopod:1.15.54e4f0440520f
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

9,342
discount-bandithelmforgeVerified publisher2.0.81 of 3See more

discount-bandit helmforge 2.0.8

1 of the 3 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
cybrarist/discount-bandit:v4.0.4e9e2447ac666
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

29,817
supersethelmforgeVerified publisher1.3.61 of 5See more

superset helmforge 1.3.6

1 of the 5 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
helmforge/kubectl:1.35.3c3f97e954c47
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

5,714
steampipehelm-steampipeVerified publisher2.4.11 of 1See more

steampipe helm-steampipe 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/devops-ia/steampipe:v2.4.1a982103d91d3
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

3,124
jaegerhuseyinbabalVerified publisher0.1.01 of 3See more

jaeger huseyinbabal 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:latestab6f1a1f0fb4
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

1,477
monitoring-stackict-platformVerified publisher0.4.03 of 13See more

monitoring-stack ict-platform 0.4.0

3 of the 13 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/loki:3.6.73c8fd3570dd9
go.opentelemetry.io/otel@v1.38.0
1.41.0
ghcr.io/grafana/alloy-operator:1.7.02ce23f948e02
go.opentelemetry.io/otel@v1.37.0
1.41.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

9,573
infisical-pki-issuerinfisical-charts1.0.01 of 1See more

infisical-pki-issuer infisical-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
infisical/pki-issuer:latestff38294270e3
go.opentelemetry.io/otel@v1.39.0
1.41.0

Open the chart page →

566
influxdbinfluxdb20.1.01 of 1See more

influxdb influxdb2 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
library/influxdb:latestf75e48af0598
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

2,333
athens-proxyjenkins-x0.2.21 of 2See more

athens-proxy jenkins-x 0.2.2

1 of the 2 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:latestab6f1a1f0fb4
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

1,336
corednsjouveVerified publisher1.45.01 of 1See more

coredns jouve 1.45.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
coredns/coredns:1.13.19b9128672209
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

887
daily-restartjuniorjpdj0.1.691 of 1See more

daily-restart juniorjpdj 0.1.69

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/juniorjpdj/containers/openssl-kubectl:1.36.1-r358afba209ea0
go.opentelemetry.io/otel@v1.39.0
1.41.0

Open the chart page →

458
mumbledjjuniorjpdj0.1.1991 of 2See more

mumbledj juniorjpdj 0.1.199

1 of the 2 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/juniorjpdj/containers/openssl-kubectl:1.36.1-r358afba209ea0
go.opentelemetry.io/otel@v1.39.0
1.41.0

Open the chart page →

953
nginx-gateway-fabricjupyter-jscVerified publisher2.4.11 of 1See more

nginx-gateway-fabric jupyter-jsc 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/nginx/nginx-gateway-fabric:2.4.180f3a0a51af5
go.opentelemetry.io/otel@v1.39.0
1.41.0

Open the chart page →

359
thanosk8sonlabVerified publisher1.1.71 of 1See more

thanos k8sonlab 1.1.7

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
thanosio/thanos:v0.41.0cf3e9b292e43
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

592
kagentkagent0.10.11 of 6See more

kagent kagent 0.10.1

1 of the 6 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/kagent-dev/kagent/tools:0.2.150b431281d3e
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

2,900
authentikkagiso-me0.1.11 of 1See more

authentik kagiso-me 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/goauthentik/server:2026.2.146a71d75dfd3
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

4,568
dockerdkarljorgensen0.1.01 of 1See more

dockerd karljorgensen 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
library/docker:28.5.2-dind2a232a42256f
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

2,034
k10restorekastenVerified publisher8.0.141 of 1See more

k10restore kasten 8.0.14

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
gcr.io/kasten-images/restorectl:8.0.145a0884f9a90c
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

1,459
metallbkomailo-helm-charts1.2.43 of 4See more

metallb komailo-helm-charts 1.2.4

3 of the 4 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
quay.io/metallb/controller:v0.16.1f51ab515de9c
go.opentelemetry.io/otel@v1.40.0
1.41.0
quay.io/metallb/frr-k8s:v0.0.251cb06fb2d553
go.opentelemetry.io/otel@v1.40.0
1.41.0
quay.io/metallb/speaker:v0.16.116561e96531e
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

2,127
airflow-operatorkubedoopVerified publisher0.4.01 of 1See more

airflow-operator kubedoop 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
quay.io/zncdatadev/airflow-operator:0.4.0b716ef483b75
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

390
hdfs-operatorkubedoopVerified publisher0.4.01 of 1See more

hdfs-operator kubedoop 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
quay.io/zncdatadev/hdfs-operator:0.4.0eb3c2928250e
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

390
secret-operatorkubedoopVerified publisher0.4.01 of 5See more

secret-operator kubedoop 0.4.0

1 of the 5 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
quay.io/zncdatadev/secret-csi-driver:0.4.0604a7d98ab58
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

4,341
cloudflaredkubernetes-homelab-helm-chartsVerified publisher0.1.11 of 1See more

cloudflared kubernetes-homelab-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2026.3.06b599ca3e974
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

1,437
easegresskubesphere-stable1.0.01 of 1See more

easegress kubesphere-stable 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
megaease/easegress:latestfad1c7452958
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

1,308
kubiya-runnerkubiya-helm-chartsOfficialVerified publisher0.9.41 of 9See more

kubiya-runner kubiya-helm-charts 0.9.4

1 of the 9 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/kubiyabot/tool-manager:0.5.80cca6760763a
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

20,204
openidkvalitetsitVerified publisher1.7.21 of 2See more

openid kvalitetsit 1.7.2

1 of the 2 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
quay.io/oauth2-proxy/oauth2-proxy:v7.14.368336da945bd
go.opentelemetry.io/otel@v1.39.0
1.41.0

Open the chart page →

586
everest-lakefs-csi-driverlakefsVerified publisher1.3.02 of 3See more

everest-lakefs-csi-driver lakefs 1.3.0

2 of the 3 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
public.ecr.aws/csi-components/csi-node-driver-registrar:v2.16.0-eksbuild.3592d7034d6c7
go.opentelemetry.io/otel@v1.40.0
1.41.0
public.ecr.aws/csi-components/livenessprobe:v2.18.0-eksbuild.38e307f4e5820
go.opentelemetry.io/otel@v1.39.0
1.41.0

Open the chart page →

841
uptime-kumalbenicio-communityVerified publisher0.1.11 of 1See more

uptime-kuma lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

33,242
linode-blockstorage-csi-driverlinode-blockstorage-csi-driverOfficialVerified publisher1.1.44 of 5See more

linode-blockstorage-csi-driver linode-blockstorage-csi-driver 1.1.4

4 of the 5 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-attacher:v4.11.0b74b05b39501
go.opentelemetry.io/otel@v1.38.0
1.41.0
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.16.0ab482308a492
go.opentelemetry.io/otel@v1.40.0
1.41.0
registry.k8s.io/sig-storage/csi-provisioner:v6.2.06be9f63ca4ca
go.opentelemetry.io/otel@v1.40.0
1.41.0
registry.k8s.io/sig-storage/csi-resizer:v2.1.0589e525cddef
go.opentelemetry.io/otel@v1.39.0
1.41.0

Open the chart page →

2,932

Container images carrying it

339 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
grafana/grafana:12.1.1a1701c218024
go.opentelemetry.io/otel@v1.36.0
1.41.0
1
grafana/grafana:12.3.2ba93c9d192e5
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
grafana/loki:3.6.5847c287ada0e
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
grafana/loki:3.6.192bd5700577b
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
grafana/loki:3.6.3cd6e176883a9
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
grafana/loki-canary:3.6.5fbb984bab741
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
grafana/otel-lgtm:0.11.1009d8c3ce4f3a
go.opentelemetry.io/otel@v1.36.0
1.41.0
1
grafana/promtail:3.6.18dcfdf466da0
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
hashicorp/boundary:latest76a201954ca0
go.opentelemetry.io/otel@v1.39.0
1.41.0
1
infisical/pki-issuer:latestff38294270e3
go.opentelemetry.io/otel@v1.39.0
1.41.0
1
instill/artifact-backend:b28766ac4a393e601ed
go.opentelemetry.io/otel@v1.40.0
1.41.0
1
instill/mgmt-backend:d0933d4ebe12f77a3f9
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
instill/model-backend:611f0f2e980125e5ba5
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
istio/install-cni:1.29.0ce27c9ce43c8
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
istio/pilot:1.29.0325156535773
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
istio/pilot:1.29.1f8b0e412ac4a
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
jaegertracing/jaeger:2.9.0e128b9adbb29
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
khaliq/pingme:v0.2.749f96888d2ab
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
kubevirtmanager/kubevirt-manager:1.5.41b98f1b5977a
go.opentelemetry.io/otel@v1.39.0
1.41.0
1
library/caddy:2.11.2-alpine834468128c76
go.opentelemetry.io/otel@v1.40.0
1.41.0
1
library/docker:28.5.2-dind2a232a42256f
go.opentelemetry.io/otel@v1.36.0
1.41.0
1
library/influxdb:latestf75e48af0598
go.opentelemetry.io/otel@v1.40.0
1.41.0
1
linuxserver/wireguard:latestbf03578ef731
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
linuxserver/wireguard:1.0.20260223-r0-ls122dca67384e3e9
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
longhornio/longhorn-manager:v1.10.05b0bc1b88f0c
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
megaease/easegress:latestfad1c7452958
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
mitre/vulcan:latest2bc4dfb8150f
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
obolnetwork/charon-dkg-sidecar:maine263be0a7440
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
opencsghq/csghub-xnet:v2.4.0-ee04121fd19ef9
go.opentelemetry.io/otel@v1.39.0
1.41.0
1
openkruise/agent-sandbox-controller:v0.3.0e0a3bf7c0dc5
go.opentelemetry.io/otel@v1.40.0
1.41.0
1
openkruise/kruise-game-manager:v1.1.0d3c6d69d2c39
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
oryd/hydra:v26.2.0ff67c7fb5f95
go.opentelemetry.io/otel@v1.40.0
1.41.0
1
oryd/keto:v26.2.0bfdb8b9e283a
go.opentelemetry.io/otel@v1.40.0
1.41.0
1
oryd/kratos:v26.2.02a13bb8d362c
go.opentelemetry.io/otel@v1.40.0
1.41.0
1
oryd/oathkeeper:v26.2.0467329abde34
go.opentelemetry.io/otel@v1.40.0
1.41.0
1
otel/opentelemetry-collector-contrib:0.143.03bc07732530c
go.opentelemetry.io/otel@v1.39.0
1.41.0
1
otel/opentelemetry-collector-contrib:0.145.0a7343f018690
go.opentelemetry.io/otel@v1.39.1-0.20260115134311-f809f7d71e2d
1.41.0
1
otel/opentelemetry-collector-contrib:0.139.0faf125d656fa
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
owncloud/ocis:8.0.1b38fd8fdd58f
go.opentelemetry.io/otel@v1.39.0
1.41.0
1
percona/percona-postgresql-operator:2.8.06cce2698d3f5
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
photoprism/photoprism:251130db16ee6b1ba3
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
pulumi/pulumi-kubernetes-operator:v2.5.17dace4491358
go.opentelemetry.io/otel@v1.40.0
1.41.0
1
rancher/mirrored-longhornio-csi-node-driver-registrar:v2.16.0-20260428e82a8c8f800d
go.opentelemetry.io/otel@v1.40.0
1.41.0
1
rancher/mirrored-longhornio-csi-provisioner:v5.3.0-202604289e519a21a77c
go.opentelemetry.io/otel@v1.39.0
1.41.0
1
reportportal/migrations:5.15.4464468240d7b
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
rotationalio/linode-acme-webhook:1.0.0cc7bb030a20f
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
semaphoreui/semaphore:latest:v2.19.123996804607eb
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
semaphoreui/semaphore:v2.19.1498ad9bc7a2a0
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
semaphoreui/semaphore:v2.18.3e9260bfa8255
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
supabase/gotrue:v2.189.0385184459f57
go.opentelemetry.io/otel@v1.40.0
1.41.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.