StackRadar

CVE-2026-29181

High

Advisory

Published 7 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.008
54th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
344
of 17,781 indexed, latest versions
Container images
339
deployed by those charts
Fix available
1 of 1
affected package

OpenTelemetry-Go: multi-value `baggage` header extraction causes excessive allocations (remote dos amplification)

Carried by container images the latest versions of 344 of 17,781 indexed charts deploy, on 339 images.

Affected packageAffected versionsFixed inImages
go.opentelemetry.io/otelgolangv1.36.0, v1.37.0, v1.38.0, v1.39.0+2 more1.41.0339
OSV records
GHSA-mh2q-q3fh-2475
Also known as
GO-2026-5506

Charts affected

344 by stars
ChartLatestAffected imagesRadar Score
dumpscriptcloudscriptVerified publisher1.8.31 of 1See more

dumpscript cloudscript 1.8.3

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/cloudscript-technology/dumpscript:v0.0.42-alpine-edgefce5b6fd161c
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

2,125
headscaleheadscaleVerified publisher1.0.191 of 3See more

headscale headscale 1.0.19

1 of the 3 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
alpine/k8s:1.36.244ef4942e171
go.opentelemetry.io/otel@v1.39.0
1.41.0

Open the chart page →

3,383
simple-krr-dashboardhelm-simple-krr-dashboardVerified publisher1.6.21 of 3See more

simple-krr-dashboard helm-simple-krr-dashboard 1.6.2

1 of the 3 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
alpine/kubectl:1.35.2ec8f734b0a10
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

2,234
coreinstill-aiOfficialVerified publisher0.1.754 of 15See more

core instill-ai 0.1.75

4 of the 15 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
instill/artifact-backend:b28766ac4a393e601ed
go.opentelemetry.io/otel@v1.40.0
1.41.0
instill/mgmt-backend:d0933d4ebe12f77a3f9
go.opentelemetry.io/otel@v1.37.0
1.41.0
instill/model-backend:611f0f2e980125e5ba5
go.opentelemetry.io/otel@v1.37.0
1.41.0
temporalio/admin-tools:1.28cfde8170c92f
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

30,816
kanister-operatorkanister0.118.01 of 1See more

kanister-operator kanister 0.118.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/kanisterio/controller:0.118.0d22616a5998b
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

1,145
oesopsmxVerified publisher4.0.321 of 25See more

oes opsmx 4.0.32

1 of the 25 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/opa:1.12.084fb1af7401c
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

107,811
skypilotskypilotOfficialVerified publisher0.13.01 of 3See more

skypilot skypilot 0.13.0

1 of the 3 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.11.8695d79381ee6
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

5,852
uptraceuptrace2.0.21 of 2See more

uptrace uptrace 2.0.2

1 of the 2 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
uptrace/uptrace:2.0.234a02c3b2d12
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

1,619
vaultvaultVerified publisher1.22.01 of 4See more

vault vault 1.22.0

1 of the 4 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
alpine/k8s:1.35.5d870622d0040
go.opentelemetry.io/otel@v1.39.0
1.41.0

Open the chart page →

4,243
argo-cdwenerme10.9.01 of 3See more

argo-cd wenerme 10.9.0

1 of the 3 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.45.18499afd690c4
go.opentelemetry.io/otel@v1.39.0
1.41.0

Open the chart page →

3,218
upcloud-csiankra-chartsVerified publisher0.4.01 of 8See more

upcloud-csi ankra-charts 0.4.0

1 of the 8 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
alpine/k8s:1.31.137a319b15cfc9
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

14,917
scannerappscodeVerified publisher2026.1.151 of 3See more

scanner appscode 2026.1.15

1 of the 3 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/appscode/scanner:v0.0.2116907aae5de1
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

5,299
arvancloud-webhookarvancloud-webhookVerified publisher1.0.01 of 1See more

arvancloud-webhook arvancloud-webhook 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/parmincloud/arvancloud-certmanager-issuer:v1.0.00b97452674a3
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

2,297
astradnsastradnsVerified publisher0.2.91 of 2See more

astradns astradns 0.2.9

1 of the 2 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/astradns/astradns-operator:v0.2.909e58b62416a
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

2,613
btrfs-nfs-csibtrfs-nfs-csi0.4.05 of 7See more

btrfs-nfs-csi btrfs-nfs-csi 0.4.0

5 of the 7 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-attacher:v4.11.0b74b05b39501
go.opentelemetry.io/otel@v1.38.0
1.41.0
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.16.0ab482308a492
go.opentelemetry.io/otel@v1.40.0
1.41.0
registry.k8s.io/sig-storage/csi-resizer:v2.1.0589e525cddef
go.opentelemetry.io/otel@v1.39.0
1.41.0
registry.k8s.io/sig-storage/csi-snapshotter:v8.5.0da081c27e8a6
go.opentelemetry.io/otel@v1.40.0
1.41.0
registry.k8s.io/sig-storage/livenessprobe:v2.18.0c4cc074199c0
go.opentelemetry.io/otel@v1.39.0
1.41.0

Open the chart page →

3,183
buildkite-agent-metricsbuildkite-agent-metrics0.1.01 of 1See more

buildkite-agent-metrics buildkite-agent-metrics 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
public.ecr.aws/buildkite/agent-metrics:v5.11.016e7f5c7161e
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

1,533
spectrechronicleVerified publisher0.3.81 of 1See more

spectre chronicle 0.3.8

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/chronicleprotocol/spectre:0.68.34e872bc016e8
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

1,515
grafanacloudposse0.2.61 of 1See more

grafana cloudposse 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

720
openstack-manila-csicloud-provider-openstack2.36.31 of 5See more

openstack-manila-csi cloud-provider-openstack 2.36.3

1 of the 5 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.15.011f199f6bec4
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

3,749
developer-operatordeveloper-operatorVerified publisher2.1.21 of 1See more

developer-operator developer-operator 2.1.2

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
registry.gitlab.com/xrow-public/developer-operator/developer-operator-controller:2.1.2301847adfe16
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

1,828
elchi-stackelchi1.13.01 of 10See more

elchi-stack elchi 1.13.0

1 of the 10 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/grafana:12.2.074144189b384
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

15,383
enbuildenbuildVerified publisher0.0.502 of 6See more

enbuild enbuild 0.0.50

2 of the 6 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-backend:1.0.31c7afac3446d6
go.opentelemetry.io/otel@v1.40.0
1.41.0
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

31,510
gateboardgateboard1.12.51 of 1See more

gateboard gateboard 1.12.5

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
udhos/gateboard:1.12.53acc0e7599bf
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

1,463
gateboard-discoverygateboard1.9.51 of 1See more

gateboard-discovery gateboard 1.9.5

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
udhos/gateboard-discovery:1.9.55567c9363c4c
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

1,190
go-hello-world-chartgo-hello-worldVerified publisher1.8.31 of 1See more

go-hello-world-chart go-hello-world 1.8.3

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/wasilak/go-hello-world:1.8.366d353e7693f
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

742
gomenhashaigomenhashaiOfficialVerified publisher1.3.41 of 1See more

gomenhashai gomenhashai 1.3.4

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/gomenhashai/gomenhashai:v1.3.36f031172a5ec
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

628
headscale-uiheadscale-uiVerified publisher0.2.91 of 1See more

headscale-ui headscale-ui 0.2.9

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/gurucomputing/headscale-ui:2026.03.17015f5ba04bcb
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

1,476
spirehelm-spireVerified publisher0.30.21 of 10See more

spire helm-spire 0.30.2

1 of the 10 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.15.011f199f6bec4
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

1,640
hpe-greenlake-file-csi-driverhpe-storageVerified publisher2.6.42 of 7See more

hpe-greenlake-file-csi-driver hpe-storage 2.6.4

2 of the 7 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.15.011f199f6bec4
go.opentelemetry.io/otel@v1.36.0
1.41.0
registry.k8s.io/sig-storage/csi-provisioner:v6.1.0e5900dc98b0d
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

6,095
hybrid-csi-pluginhybrid-csi-plugin0.1.111 of 1See more

hybrid-csi-plugin hybrid-csi-plugin 0.1.11

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/hybrid-csi-provisioner:v0.3.1221e07794a8a
go.opentelemetry.io/otel@v1.39.0
1.41.0

Open the chart page →

373
interlinkinterlink0.6.11 of 2See more

interlink interlink 0.6.1

1 of the 2 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/interlink-hq/interlink/virtual-kubelet-inttw:latest0e05a7b49c33
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

2,416
tailscale-operatorjacobcolvinVerified publisher0.1.01 of 1See more

tailscale-operator jacobcolvin 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
tailscale/k8s-operator:unstablecc9b8f6d9dea
go.opentelemetry.io/otel@v1.39.0
1.41.0

Open the chart page →

242
k8s-grafana-stackk8s-grafana-stackVerified publisher0.2.329 of 17See more

k8s-grafana-stack k8s-grafana-stack 0.2.32

9 of the 17 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/alloy:v1.14.0f50931848bd8
go.opentelemetry.io/otel@v1.40.0
1.41.0
grafana/grafana:12.3.12175aaa91c96
go.opentelemetry.io/otel@v1.38.0
1.41.0
grafana/loki:3.6.73c8fd3570dd9
go.opentelemetry.io/otel@v1.38.0
1.41.0
grafana/loki-canary:3.6.70dac7d5cb383
go.opentelemetry.io/otel@v1.38.0
1.41.0
grafana/tempo:2.9.065a578975943
go.opentelemetry.io/otel@v1.38.0
1.41.0
quay.io/prometheus-operator/prometheus-config-reloader:v0.89.0cb4ac6a56555
go.opentelemetry.io/otel@v1.39.0
1.41.0
quay.io/prometheus/alertmanager:v0.31.188b605de9aba
go.opentelemetry.io/otel@v1.39.0
1.41.0
quay.io/prometheus/prometheus:v3.10.07571a304e67f
go.opentelemetry.io/otel@v1.40.0
1.41.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

15,418
kubebrowsekubebrowse1.7.01 of 5See more

kubebrowse kubebrowse 1.7.0

1 of the 5 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/browsersec/kubebrowse-frontend:chore-improve-backbd6bea5e487c
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

4,141
authz-pdplabs64io-helm-chartsVerified publisher0.6.01 of 1See more

authz-pdp labs64io-helm-charts 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/cerbos/cerbos:0.51.08d35a64e4a99
go.opentelemetry.io/otel@v1.39.0
1.41.0

Open the chart page →

800
lgtmlgtmVerified publisher0.24.01 of 9See more

lgtm lgtm 0.24.0

1 of the 9 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/grafana:13.2.0-distroless08e6ab6d67a5
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

1,008
lgtm-stacklgtm-stackVerified publisher0.1.31 of 8See more

lgtm-stack lgtm-stack 0.1.3

1 of the 8 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/grafana:13.1.0121a7a9ece6d
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

5,576
go-hello-worldloafoe0.14.01 of 1See more

go-hello-world loafoe 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/loafoe/go-hello-world:v2.13.0d3fb171f20e1
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

672
magentomagento3.2.31 of 12See more

magento magento 3.2.3

1 of the 12 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.10.05b0bc1b88f0c
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

13,479
mcpmcp-chartsVerified publisher0.0.231 of 7See more

mcp mcp-charts 0.0.23

1 of the 7 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/gla-rad/mc-mms-router:latest032e977d9adf
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

6,929
photoprismmmontesVerified publisher0.14.01 of 1See more

photoprism mmontes 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
photoprism/photoprism:251130db16ee6b1ba3
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

11,103
opentelemetry-demoopentelemetry-helmVerified publisher0.41.12 of 34See more

opentelemetry-demo opentelemetry-helm 0.41.1

2 of the 34 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/grafana:13.1.0121a7a9ece6d
go.opentelemetry.io/otel@v1.40.0
1.41.0
ghcr.io/open-telemetry/demo:3.0.0-opamp-server62cfae32adb1
go.opentelemetry.io/otel@v1.39.0
1.41.0

Open the chart page →

22,420
opikopikOfficialVerified publisher2.2.592 of 13See more

opik opik 2.2.59

2 of the 13 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
alpine/kubectl:1.35.0862d86046bbc
go.opentelemetry.io/otel@v1.36.0
1.41.0
ghcr.io/comet-ml/opik/opik-python-backend:2.2.59269d0e55ea97
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

14,334
osc-bsu-csi-driverosc-bsu-csi-driverVerified publisher2.2.02 of 6See more

osc-bsu-csi-driver osc-bsu-csi-driver 2.2.0

2 of the 6 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.15.011f199f6bec4
go.opentelemetry.io/otel@v1.36.0
1.41.0
registry.k8s.io/sig-storage/csi-provisioner:v6.1.1d992c36d4ddd
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

2,335
jobs-managerraczylo-comVerified publisher0.1.151 of 1See more

jobs-manager raczylo-com 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/lukaszraczylo/jobs-manager-operator:0.1.15e6239e2838d7
go.opentelemetry.io/otel@v1.39.0
1.41.0

Open the chart page →

487
kube-images-syncraczylo-comVerified publisher0.5.571 of 1See more

kube-images-sync raczylo-com 0.5.57

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/lukaszraczylo/kubernetes-images-sync-operator:0.5.57a424948c8143
go.opentelemetry.io/otel@v1.39.0
1.41.0

Open the chart page →

401
reportportalreportportal-ioOfficialVerified publisher26.8.121 of 15See more

reportportal reportportal-io 26.8.12

1 of the 15 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
reportportal/migrations:5.15.4464468240d7b
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

11,869
scaleway-csiscaleway-charts0.2.11 of 8See more

scaleway-csi scaleway-charts 0.2.1

1 of the 8 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.14.05244abbe87e0
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

3,812
scaffoldsigstoreVerified publisher0.6.1141 of 15See more

scaffold sigstore 0.6.114

1 of the 15 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/sigstore/scaffolding/ct_server:v0.7.3166664ba563e7
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

7,710
wireguardslybase-wireguardVerified publisher2.0.61 of 1See more

wireguard slybase-wireguard 2.0.6

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
linuxserver/wireguard:1.0.20260223-r0-ls122dca67384e3e9
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

436

Container images carrying it

339 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/dapr/operator:1.17.0-rc.3d5cc61cbe735
go.opentelemetry.io/otel@v1.39.0
1.41.0
1
ghcr.io/dapr/placement:1.17.0-rc.3a237b43cd5c6
go.opentelemetry.io/otel@v1.39.0
1.41.0
1
ghcr.io/dapr/scheduler:1.17.0-rc.36c62e01e736b
go.opentelemetry.io/otel@v1.39.0
1.41.0
1
ghcr.io/dapr/sentry:1.17.0-rc.3bf79b03591e0
go.opentelemetry.io/otel@v1.39.0
1.41.0
1
ghcr.io/devops-ia/steampipe:v2.4.1a982103d91d3
go.opentelemetry.io/otel@v1.40.0
1.41.0
1
ghcr.io/dexidp/dex:v2.44.05d0656fce7d4
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
ghcr.io/digitalis-io/vals-operator:v0.8.17c776499b8c9
go.opentelemetry.io/otel@v1.39.0
1.41.0
1
ghcr.io/ethpandaops/benchmarkoor:latest5470b2ec3161
go.opentelemetry.io/otel@v1.39.0
1.41.0
1
ghcr.io/exalsius/exalsius-operator:0.12.0d24a579a3c75
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
ghcr.io/external-secrets/external-secrets:v2.4.19440a40b3947
go.opentelemetry.io/otel@v1.39.0
1.41.0
1
ghcr.io/external-secrets/external-secrets:v2.1.0ec40c3d9c48f
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
ghcr.io/ferretdb/ferretdb:2.7.05706414241eb
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
ghcr.io/flanksource/postgres:17.6-497383cebcf66281fc1
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
ghcr.io/formancehq/membership:v1.11.024a0113d5fb0
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
ghcr.io/gla-rad/mc-mms-router:latest032e977d9adf
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
ghcr.io/glassflow/glassflow-etl-migration:v3.2.07db1a1bf3dae
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
ghcr.io/goauthentik/server:2026.2.146a71d75dfd3
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
ghcr.io/gomenhashai/gomenhashai:v1.3.36f031172a5ec
go.opentelemetry.io/otel@v1.36.0
1.41.0
1
ghcr.io/grafana/alloy-operator:1.3.02088dcb22aaa
go.opentelemetry.io/otel@v1.36.0
1.41.0
1
ghcr.io/grafana/alloy-operator:1.7.02ce23f948e02
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
ghcr.io/grafana/alloy-operator:1.8.1ae85d68749c7
go.opentelemetry.io/otel@v1.40.0
1.41.0
1
ghcr.io/gurucomputing/headscale-ui:2026.03.17015f5ba04bcb
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
ghcr.io/idebeijer/gameserver-operator:latest1b099cfe9e5e
go.opentelemetry.io/otel@v1.36.0
1.41.0
1
ghcr.io/imgproxy/imgproxy:v3.30.074c1bee92e04
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
ghcr.io/interlink-hq/interlink/virtual-kubelet-inttw:latest0e05a7b49c33
go.opentelemetry.io/otel@v1.36.0
1.41.0
1
ghcr.io/invergent-ai/surogate-hub:latest6d4106724d56
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
ghcr.io/kagent-dev/kagent/tools:0.2.150b431281d3e
go.opentelemetry.io/otel@v1.40.0
1.41.0
1
ghcr.io/kagent-dev/kagent/tools:0.0.13c8882543f693
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
ghcr.io/kanisterio/controller:0.118.0d22616a5998b
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
ghcr.io/kedify/otel-add-on:v0.1.4a6f2155bd822
go.opentelemetry.io/otel@v1.40.0
1.41.0
1
ghcr.io/kluster-manager/cluster-gateway:v1.12.158bed8d1e7fc
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
ghcr.io/kluster-manager/cluster-gateway-manager:v1.12.1f22cae0e6cf3
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
ghcr.io/kluster-manager/cluster-proxy:v0.10.1a7fce69e171c
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
ghcr.io/kluster-manager/fluxcd-addon:v0.0.103475404bef5c
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
ghcr.io/kluster-manager/managed-serviceaccount:v0.10.0fc256885915b
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
ghcr.io/kluster-manager/registration-operator:v1.2.00cbced8e6240
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
ghcr.io/kubevault/vault-operator:v0.24.00087cb49616f
go.opentelemetry.io/otel@v1.40.0
1.41.0
1
ghcr.io/kubiyabot/tool-manager:0.5.80cca6760763a
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
ghcr.io/loafoe/go-hello-world:v2.13.0d3fb171f20e1
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
ghcr.io/lockdep/stackradar-scanner:0.3.0dd8a35d50c2d
go.opentelemetry.io/otel@v1.39.0
1.41.0
1
ghcr.io/loft-sh/kubernetes:v1.35.090097a08b87c
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
ghcr.io/lukaszraczylo/jobs-manager-operator:0.1.15e6239e2838d7
go.opentelemetry.io/otel@v1.39.0
1.41.0
1
ghcr.io/lukaszraczylo/kubernetes-images-sync-operator:0.5.57a424948c8143
go.opentelemetry.io/otel@v1.39.0
1.41.0
1
ghcr.io/melancholictheory/wellcake:0.8.12fd2678f07ef
go.opentelemetry.io/otel@v1.36.0
1.41.0
1
ghcr.io/ncsa/jupyterhub-metrics/collector:1.3.0dcb8c731bb1b
go.opentelemetry.io/otel@v1.36.0
1.41.0
1
ghcr.io/nginx/nginx-gateway-fabric:2.4.180f3a0a51af5
go.opentelemetry.io/otel@v1.39.0
1.41.0
1
ghcr.io/nnstd/glauth:2.52e6e09fa77dd
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
ghcr.io/nnstd/seaweedfs-operator:1.43ebe2fd253f6
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
ghcr.io/openconfig/gnmic:0.45.0d422a9ebd4a2
go.opentelemetry.io/otel@v1.40.0
1.41.0
1
ghcr.io/openlit/openlit:1.24.02434560e8f0e
go.opentelemetry.io/otel@v1.39.0
1.41.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.