StackRadar

CVE-2026-29181

High

Advisory

Published 7 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.008
54th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
344
of 17,781 indexed, latest versions
Container images
339
deployed by those charts
Fix available
1 of 1
affected package

OpenTelemetry-Go: multi-value `baggage` header extraction causes excessive allocations (remote dos amplification)

Carried by container images the latest versions of 344 of 17,781 indexed charts deploy, on 339 images.

Affected packageAffected versionsFixed inImages
go.opentelemetry.io/otelgolangv1.36.0, v1.37.0, v1.38.0, v1.39.0+2 more1.41.0339
OSV records
GHSA-mh2q-q3fh-2475
Also known as
GO-2026-5506

Charts affected

344 by stars
ChartLatestAffected imagesRadar Score
uptime-kumaloeken-at-homeVerified publisher2.3.21 of 1See more

uptime-kuma loeken-at-home 2.3.2

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

33,242
vcluster-headloftVerified publisher0.0.0-035ec6e1 of 2See more

vcluster-head loft 0.0.0-035ec6e

1 of the 2 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/kubernetes:v1.35.090097a08b87c
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

1,269
loki-proxyloki-proxyVerified publisher0.4.11 of 1See more

loki-proxy loki-proxy 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/peak-scale/observability-tenancy/loki-proxy:0.4.1548e962d0061
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

782
istio-helm-cnimesosphere1.25.11 of 1See more

istio-helm-cni mesosphere 1.25.1

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
istio/install-cni:1.29.0ce27c9ce43c8
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

2,533
istio-helm-istiodmesosphere1.25.12 of 2See more

istio-helm-istiod mesosphere 1.25.1

2 of the 2 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
istio/pilot:1.29.0325156535773
go.opentelemetry.io/otel@v1.38.0
1.41.0
mesosphere/kubectl:v1.35.0-alpineea01a9387771
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

3,777
kube-prometheus-stackmesosphere87.16.01 of 7See more

kube-prometheus-stack mesosphere 87.16.0

1 of the 7 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/grafana:13.1.0121a7a9ece6d
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

7,398
prometheus-operatormesosphere12.11.132 of 8See more

prometheus-operator mesosphere 12.11.13

2 of the 8 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/grafana:12.3.39e1e77ade304
go.opentelemetry.io/otel@v1.39.0
1.41.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

11,689
istio-helm-istiodmesosphere-stable1.23.61 of 2See more

istio-helm-istiod mesosphere-stable 1.23.6

1 of the 2 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
mesosphere/kubectl:v1.35.0-alpineea01a9387771
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

4,603
kube-prometheus-stackmesosphere-stable75.9.11 of 7See more

kube-prometheus-stack mesosphere-stable 75.9.1

1 of the 7 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-operator:v0.83.0b6a89b8ec08f
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

10,180
mw-autoinstrumentationmiddleware-labsVerified publisher1.2.61 of 6See more

mw-autoinstrumentation middleware-labs 1.2.6

1 of the 6 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.132.05e331c925091
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

3,713
mollysocketmollysocket-wrenixVerified publisher0.1.141 of 2See more

mollysocket mollysocket-wrenix 0.1.14

1 of the 2 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
alpine/kubectl:1.35.3c4a11ae9a1cb
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

2,521
grafana-chartmy-personal-grafana0.1.01 of 1See more

grafana-chart my-personal-grafana 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

720
jupyterhub-metricsncsaVerified publisher1.3.03 of 5See more

jupyterhub-metrics ncsa 1.3.0

3 of the 5 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
go.opentelemetry.io/otel@v1.40.0
1.41.0
migrate/migrate:latestcc4ad8e19d66
go.opentelemetry.io/otel@v1.37.0
1.41.0
ghcr.io/ncsa/jupyterhub-metrics/collector:1.3.0dcb8c731bb1b
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

4,132
ciliumnicklasfrahm-ciliumVerified publisher0.7.44 of 6See more

cilium nicklasfrahm-cilium 0.7.4

4 of the 6 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
quay.io/cilium/cilium:v1.18.2858f807ea4e2
go.opentelemetry.io/otel@v1.37.0
1.41.0
quay.io/cilium/hubble-relay:v1.18.26079308ee15e
go.opentelemetry.io/otel@v1.37.0
1.41.0
quay.io/cilium/hubble-ui-backend:v0.13.3db1454e45dc3
go.opentelemetry.io/otel@v1.37.0
1.41.0
quay.io/cilium/operator-generic:v1.18.2cb4e4ffc5789
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

7,092
firehose-ethereumnodeifyVerified publisher1.7.11 of 2See more

firehose-ethereum nodeify 1.7.1

1 of the 2 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/go-ethereum:geth-v1.16.9-fh3.08e3cb38953a3
go.opentelemetry.io/otel@v1.39.0
1.41.0

Open the chart page →

5,565
lensoci-ai-incubations0.1.144 of 16See more

lens oci-ai-incubations 0.1.14

4 of the 16 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/grafana:12.1.1a1701c218024
go.opentelemetry.io/otel@v1.36.0
1.41.0
quay.io/prometheus-operator/prometheus-config-reloader:v0.85.0ebb560bcb6bd
go.opentelemetry.io/otel@v1.37.0
1.41.0
quay.io/prometheus/prometheus:v3.5.063805ebb8d2b
go.opentelemetry.io/otel@v1.36.0
1.41.0
registry.k8s.io/ingress-nginx/controller:v1.13.21f7eaeb01933
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

17,070
ocisocis-community0.1.01 of 1See more

ocis ocis-community 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
owncloud/ocis:8.0.1b38fd8fdd58f
go.opentelemetry.io/otel@v1.39.0
1.41.0

Open the chart page →

2,346
dynamic-scoring-frameworkocm-helm-chartsVerified publisher0.1.02 of 2See more

dynamic-scoring-framework ocm-helm-charts 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
quay.io/open-cluster-management/dynamic-scoring-addon:latest7e571a08ec1a
go.opentelemetry.io/otel@v1.37.0
1.41.0
quay.io/open-cluster-management/dynamic-scoring-controller:latest587f5bc8f2ed
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

967
managed-serviceaccountocm-helm-chartsVerified publisher0.10.01 of 1See more

managed-serviceaccount ocm-helm-charts 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
quay.io/open-cluster-management/managed-serviceaccount:v0.10.0d6284bd7765a
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

1,033
agents-sandbox-controlleropenkruise0.3.01 of 1See more

agents-sandbox-controller openkruise 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
openkruise/agent-sandbox-controller:v0.3.0e0a3bf7c0dc5
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

260
kruise-gameopenkruise1.1.01 of 1See more

kruise-game openkruise 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
openkruise/kruise-game-manager:v1.1.0d3c6d69d2c39
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

911
openlitopenlit1.24.01 of 3See more

openlit openlit 1.24.0

1 of the 3 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/openlit/openlit:1.24.02434560e8f0e
go.opentelemetry.io/otel@v1.39.0
1.41.0

Open the chart page →

5,017
harikubeopenshift0.16.31 of 3See more

harikube openshift 0.16.3

1 of the 3 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
quay.io/harikube/vcluster-pro:0.32.1b741efae8d31
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

2,525
kb-cloud-installeropenshift2.1.351 of 1See more

kb-cloud-installer openshift 2.1.35

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
apecloud/kb-cloud-installer:v2.1.42-certified98abc64aa985
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

4,127
kubedb-certifiedopenshift2026.7.102 of 8See more

kubedb-certified openshift 2026.7.10

2 of the 8 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/appscode/petset:v0.1.093fa0daf603c
go.opentelemetry.io/otel@v1.40.0
1.41.0
ghcr.io/appscode/sidekick:v0.0.15d1036b07e348
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

4,016
kubestash-certifiedopenshift2026.7.101 of 2See more

kubestash-certified openshift 2026.7.10

1 of the 2 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/kubestash/kubestash:v0.29.043e01ed32486
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

1,090
voyager-gatewayopenshift2026.1.152 of 2See more

voyager-gateway openshift 2026.1.15

2 of the 2 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/voyagermesh/crd-manager:v0.1.013fd0cccafe8
go.opentelemetry.io/otel@v1.37.0
1.41.0
ghcr.io/voyagermesh/gateway:v1.6.223f4da194134
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

2,567
operator-lifecycle-manageroperator-lifecycle-manager1.2.22 of 2See more

operator-lifecycle-manager operator-lifecycle-manager 1.2.2

2 of the 2 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
quay.io/operator-framework/catalogd:v1.8.06ff40fa6257f
go.opentelemetry.io/otel@v1.40.0
1.41.0
quay.io/operator-framework/operator-controller:v1.8.0bca5dfcc67ca
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

1,821
origin-ca-issuerorigin-ca-issuer0.6.91 of 1See more

origin-ca-issuer origin-ca-issuer 0.6.9

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
cloudflare/origin-ca-issuer:v0.14.4c92ef5ac7e4b
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

336
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.01 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

1 of the 40 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
gcr.io/kaniko-project/executor:latest4e7a52dd1f14
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

71,208
otel-add-onotel-add-onVerified publisher0.1.41 of 1See more

otel-add-on otel-add-on 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/kedify/otel-add-on:v0.1.4a6f2155bd822
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

725
parcaparca-rr0.1.02 of 2See more

parca parca-rr 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/parca-dev/parca:v0.24.23776500fde82
go.opentelemetry.io/otel@v1.37.0
1.41.0
ghcr.io/parca-dev/parca-agent:v0.42.0adc0eeb4dd05
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

2,366
parcial-1parcial-1-chart1.0.01 of 5See more

parcial-1 parcial-1-chart 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.13.137e489b22ac7
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

3,844
pax-prometheuspaxtecnologia0.7.01 of 8See more

pax-prometheus paxtecnologia 0.7.0

1 of the 8 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/grafana:13.2.1-distroless3600073f45a9
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

1,826
pmm-ha-dependenciespercona1.0.01 of 4See more

pmm-ha-dependencies percona 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
percona/percona-postgresql-operator:2.8.06cce2698d3f5
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

2,431
planectlplanectlVerified publisher0.7.01 of 10See more

planectl planectl 0.7.0

1 of the 10 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
pulumi/pulumi-kubernetes-operator:v2.5.17dace4491358
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

25,934
prismeai-appsprismeai0.7.11 of 4See more

prismeai-apps prismeai 0.7.1

1 of the 4 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-infra:latestb1198ea741d1
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

2,751
prismeai-coreprismeai1.12.11 of 7See more

prismeai-core prismeai 1.12.1

1 of the 7 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-infra:latestb1198ea741d1
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

3,270
loki-stackpyalive-cdmswebappVerified publisher2.6.51 of 4See more

loki-stack pyalive-cdmswebapp 2.6.5

1 of the 4 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

6,525
rancher-auto-registerrancher-auto-registerVerified publisher0.1.01 of 1See more

rancher-auto-register rancher-auto-register 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
registry.gitlab.com/xrow-public/ci-tools/tools:main9b9d1ed86b6a
go.opentelemetry.io/otel@v1.39.0
1.41.0

Open the chart page →

1,837
thanosrayselfs-chartsVerified publisher0.1.51 of 1See more

thanos rayselfs-charts 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.40.1aae7b2b030ed
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

750
harvester-csi-driverrke2-charts0.1.31002 of 6See more

harvester-csi-driver rke2-charts 0.1.3100

2 of the 6 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
rancher/mirrored-longhornio-csi-node-driver-registrar:v2.16.0-20260428e82a8c8f800d
go.opentelemetry.io/otel@v1.40.0
1.41.0
rancher/mirrored-longhornio-csi-provisioner:v5.3.0-202604289e519a21a77c
go.opentelemetry.io/otel@v1.39.0
1.41.0

Open the chart page →

2,688
monitoringrocketchat-server0.0.173 of 9See more

monitoring rocketchat-server 0.0.17

3 of the 9 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/loki:3.6.3cd6e176883a9
go.opentelemetry.io/otel@v1.38.0
1.41.0
otel/opentelemetry-collector-contrib:0.143.03bc07732530c
go.opentelemetry.io/otel@v1.39.0
1.41.0
quay.io/prometheus-operator/prometheus-operator:v0.83.0b6a89b8ec08f
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

6,859
jaegerromanow-helm-chartsVerified publisher1.7.31 of 1See more

jaeger romanow-helm-charts 1.7.3

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
jaegertracing/jaeger:2.9.0e128b9adbb29
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

1,597
migrantromholdings0.0.31 of 1See more

migrant romholdings 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
migrate/migrate:latestcc4ad8e19d66
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

734
acme-linoderotationalVerified publisher1.0.41 of 1See more

acme-linode rotational 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
rotationalio/linode-acme-webhook:1.0.0cc7bb030a20f
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

1,308
runwhen-localrunwhen-contribVerified publisher0.6.171 of 3See more

runwhen-local runwhen-contrib 0.6.17

1 of the 3 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/runwhen-contrib/runwhen-local:0.12.0533ce58c6e02
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

3,707
rybbitrybbit-helm1.3.01 of 7See more

rybbit rybbit-helm 1.3.0

1 of the 7 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
alpine/k8s:1.32.12048f8d9c8cc7
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

5,819
speedtestsantisbon0.1.01 of 3See more

speedtest santisbon 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

12,668
grafanasb-helm-charts0.4.01 of 1See more

grafana sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/grafana:12.2.22ebef928d7e5
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

1,795

Container images carrying it

339 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
grafana/grafana:12.1.1a1701c218024
go.opentelemetry.io/otel@v1.36.0
1.41.0
1
grafana/grafana:12.3.2ba93c9d192e5
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
grafana/loki:3.6.5847c287ada0e
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
grafana/loki:3.6.192bd5700577b
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
grafana/loki:3.6.3cd6e176883a9
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
grafana/loki-canary:3.6.5fbb984bab741
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
grafana/otel-lgtm:0.11.1009d8c3ce4f3a
go.opentelemetry.io/otel@v1.36.0
1.41.0
1
grafana/promtail:3.6.18dcfdf466da0
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
hashicorp/boundary:latest76a201954ca0
go.opentelemetry.io/otel@v1.39.0
1.41.0
1
infisical/pki-issuer:latestff38294270e3
go.opentelemetry.io/otel@v1.39.0
1.41.0
1
instill/artifact-backend:b28766ac4a393e601ed
go.opentelemetry.io/otel@v1.40.0
1.41.0
1
instill/mgmt-backend:d0933d4ebe12f77a3f9
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
instill/model-backend:611f0f2e980125e5ba5
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
istio/install-cni:1.29.0ce27c9ce43c8
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
istio/pilot:1.29.0325156535773
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
istio/pilot:1.29.1f8b0e412ac4a
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
jaegertracing/jaeger:2.9.0e128b9adbb29
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
khaliq/pingme:v0.2.749f96888d2ab
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
kubevirtmanager/kubevirt-manager:1.5.41b98f1b5977a
go.opentelemetry.io/otel@v1.39.0
1.41.0
1
library/caddy:2.11.2-alpine834468128c76
go.opentelemetry.io/otel@v1.40.0
1.41.0
1
library/docker:28.5.2-dind2a232a42256f
go.opentelemetry.io/otel@v1.36.0
1.41.0
1
library/influxdb:latestf75e48af0598
go.opentelemetry.io/otel@v1.40.0
1.41.0
1
linuxserver/wireguard:latestbf03578ef731
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
linuxserver/wireguard:1.0.20260223-r0-ls122dca67384e3e9
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
longhornio/longhorn-manager:v1.10.05b0bc1b88f0c
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
megaease/easegress:latestfad1c7452958
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
mitre/vulcan:latest2bc4dfb8150f
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
obolnetwork/charon-dkg-sidecar:maine263be0a7440
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
opencsghq/csghub-xnet:v2.4.0-ee04121fd19ef9
go.opentelemetry.io/otel@v1.39.0
1.41.0
1
openkruise/agent-sandbox-controller:v0.3.0e0a3bf7c0dc5
go.opentelemetry.io/otel@v1.40.0
1.41.0
1
openkruise/kruise-game-manager:v1.1.0d3c6d69d2c39
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
oryd/hydra:v26.2.0ff67c7fb5f95
go.opentelemetry.io/otel@v1.40.0
1.41.0
1
oryd/keto:v26.2.0bfdb8b9e283a
go.opentelemetry.io/otel@v1.40.0
1.41.0
1
oryd/kratos:v26.2.02a13bb8d362c
go.opentelemetry.io/otel@v1.40.0
1.41.0
1
oryd/oathkeeper:v26.2.0467329abde34
go.opentelemetry.io/otel@v1.40.0
1.41.0
1
otel/opentelemetry-collector-contrib:0.143.03bc07732530c
go.opentelemetry.io/otel@v1.39.0
1.41.0
1
otel/opentelemetry-collector-contrib:0.145.0a7343f018690
go.opentelemetry.io/otel@v1.39.1-0.20260115134311-f809f7d71e2d
1.41.0
1
otel/opentelemetry-collector-contrib:0.139.0faf125d656fa
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
owncloud/ocis:8.0.1b38fd8fdd58f
go.opentelemetry.io/otel@v1.39.0
1.41.0
1
percona/percona-postgresql-operator:2.8.06cce2698d3f5
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
photoprism/photoprism:251130db16ee6b1ba3
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
pulumi/pulumi-kubernetes-operator:v2.5.17dace4491358
go.opentelemetry.io/otel@v1.40.0
1.41.0
1
rancher/mirrored-longhornio-csi-node-driver-registrar:v2.16.0-20260428e82a8c8f800d
go.opentelemetry.io/otel@v1.40.0
1.41.0
1
rancher/mirrored-longhornio-csi-provisioner:v5.3.0-202604289e519a21a77c
go.opentelemetry.io/otel@v1.39.0
1.41.0
1
reportportal/migrations:5.15.4464468240d7b
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
rotationalio/linode-acme-webhook:1.0.0cc7bb030a20f
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
semaphoreui/semaphore:latest:v2.19.123996804607eb
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
semaphoreui/semaphore:v2.19.1498ad9bc7a2a0
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
semaphoreui/semaphore:v2.18.3e9260bfa8255
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
supabase/gotrue:v2.189.0385184459f57
go.opentelemetry.io/otel@v1.40.0
1.41.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.