StackRadar

CVE-2026-29181

High

Advisory

Published 7 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.008
54th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
344
of 17,781 indexed, latest versions
Container images
339
deployed by those charts
Fix available
1 of 1
affected package

OpenTelemetry-Go: multi-value `baggage` header extraction causes excessive allocations (remote dos amplification)

Carried by container images the latest versions of 344 of 17,781 indexed charts deploy, on 339 images.

Affected packageAffected versionsFixed inImages
go.opentelemetry.io/otelgolangv1.36.0, v1.37.0, v1.38.0, v1.39.0+2 more1.41.0339
OSV records
GHSA-mh2q-q3fh-2475
Also known as
GO-2026-5506

Charts affected

344 by stars
ChartLatestAffected imagesRadar Score
batchrunnerflanksourceVerified publisher1.0.441 of 1See more

batchrunner flanksource 1.0.44

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
flanksource/batch-runner:v1.0.44689687a7cf95
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

5,292
mission-controlflanksourceVerified publisher0.1.3362 of 8See more

mission-control flanksource 0.1.336

2 of the 8 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/flanksource/postgres:17.6-497383cebcf66281fc1
go.opentelemetry.io/otel@v1.38.0
1.41.0
public.ecr.aws/k4y9r6y5/kratos:v25.4.0e8014c6c58b6
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

8,902
gameserver-operatorgameserver-operator0.3.01 of 1See more

gameserver-operator gameserver-operator 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/idebeijer/gameserver-operator:latest1b099cfe9e5e
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

369
skypilotgeek-cookbookVerified publisher0.0.11 of 3See more

skypilot geek-cookbook 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.11.8695d79381ee6
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

8,923
glassflow-etlglassflowVerified publisher0.5.212 of 16See more

glassflow-etl glassflow 0.5.21

2 of the 16 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/glassflow/glassflow-etl-k8s-operator:v3.2.1e70364e88629
go.opentelemetry.io/otel@v1.38.0
1.41.0
ghcr.io/glassflow/glassflow-etl-migration:v3.2.07db1a1bf3dae
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

12,056
glassflow-operatorglassflow-operatorVerified publisher0.8.51 of 3See more

glassflow-operator glassflow-operator 0.8.5

1 of the 3 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/glassflow/glassflow-etl-k8s-operator:v3.2.1e70364e88629
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

763
glauthglauthVerified publisher0.3.171 of 2See more

glauth glauth 0.3.17

1 of the 2 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/nnstd/glauth:2.52e6e09fa77dd
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

2,587
gnp-stackgnp-stack0.0.53 of 14See more

gnp-stack gnp-stack 0.0.5

3 of the 14 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/grafana:12.2.135c41e0fd029
go.opentelemetry.io/otel@v1.37.0
1.41.0
ghcr.io/openconfig/gnmic:0.45.0d422a9ebd4a2
go.opentelemetry.io/otel@v1.40.0
1.41.0
quay.io/prometheus-operator/prometheus-operator:v0.85.0890b3bb05cf4
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

7,659
goldpingergoldpinger1.1.21 of 1See more

goldpinger goldpinger 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
bloomberg/goldpinger:3.11.2a1fb87c2e9d9
go.opentelemetry.io/otel@v1.39.0
1.41.0

Open the chart page →

280
harborgpg-dev1.18.34 of 8See more

harbor gpg-dev 1.18.3

4 of the 8 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
goharbor/harbor-core:v2.14.3a30e5a8be3d9
go.opentelemetry.io/otel@v1.40.0
1.41.0
goharbor/harbor-jobservice:v2.14.3e2b0298e894d
go.opentelemetry.io/otel@v1.40.0
1.41.0
goharbor/harbor-registryctl:v2.14.3ddf6bb429eb6
go.opentelemetry.io/otel@v1.40.0
1.41.0
goharbor/trivy-adapter-photon:v2.14.35c6f7162804c
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

3,376
kube-prometheus-stackgpg-dev84.0.01 of 6See more

kube-prometheus-stack gpg-dev 84.0.0

1 of the 6 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

4,288
prometheusgpg-dev29.2.11 of 6See more

prometheus gpg-dev 29.2.1

1 of the 6 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

3,261
thanosgpg-dev0.5.31 of 1See more

thanos gpg-dev 0.5.3

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
thanosio/thanos:v0.41.0cf3e9b292e43
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

592
velerogpg-dev12.0.01 of 1See more

velero gpg-dev 12.0.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
velero/velero:v1.18.0e4d1e79be2ee
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

1,546
grafana-cloud-onboardinggrafana0.4.73 of 5See more

grafana-cloud-onboarding grafana 0.4.7

3 of the 5 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/beyla-k8s-cache:253b2f561cb1b
go.opentelemetry.io/otel@v1.39.0
1.41.0
ghcr.io/grafana/alloy-operator:1.8.1ae85d68749c7
go.opentelemetry.io/otel@v1.40.0
1.41.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

4,637
grafana-samplinggrafana1.1.71 of 2See more

grafana-sampling grafana 1.1.7

1 of the 2 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/alloy:v1.11.38c7256f412fe
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

3,318
pyroscope-monitoringgrafana0.1.12 of 6See more

pyroscope-monitoring grafana 0.1.1

2 of the 6 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/otel-lgtm:0.11.1009d8c3ce4f3a
go.opentelemetry.io/otel@v1.36.0
1.41.0
ghcr.io/grafana/alloy-operator:1.3.02088dcb22aaa
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

8,188
routergroundcover1.12.3572 of 7See more

router groundcover 1.12.357

2 of the 7 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
public.ecr.aws/groundcovercom/grafana-groundcover:v0.0.54-grafana11.3.7ee9d973e3952
go.opentelemetry.io/otel@v1.40.0
1.41.0
public.ecr.aws/groundcovercom/kong/kubernetes-ingress-controller:3.5.3-20260205bf9db911deed
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

6,009
hakoniwahakoniwa0.1.01 of 1See more

hakoniwa hakoniwa 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/aplulu/hakoniwa:0.1.0accf0b921388
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

338
monitoring-stackhelm-charts-alexis-carbillet0.1.01 of 11See more

monitoring-stack helm-charts-alexis-carbillet 0.1.0

1 of the 11 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

9,460
appwritehelmforgeVerified publisher1.3.41 of 5See more

appwrite helmforge 1.3.4

1 of the 5 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
appwrite/appwrite:1.9.6adc7d0e7ec23
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

6,952
castopodhelmforgeVerified publisher1.2.71 of 3See more

castopod helmforge 1.2.7

1 of the 3 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
castopod/castopod:1.15.54e4f0440520f
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

9,342
discount-bandithelmforgeVerified publisher2.0.81 of 3See more

discount-bandit helmforge 2.0.8

1 of the 3 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
cybrarist/discount-bandit:v4.0.4e9e2447ac666
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

29,817
supersethelmforgeVerified publisher1.3.61 of 5See more

superset helmforge 1.3.6

1 of the 5 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
helmforge/kubectl:1.35.3c3f97e954c47
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

5,714
steampipehelm-steampipeVerified publisher2.4.11 of 1See more

steampipe helm-steampipe 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/devops-ia/steampipe:v2.4.1a982103d91d3
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

3,124
jaegerhuseyinbabalVerified publisher0.1.01 of 3See more

jaeger huseyinbabal 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:latestab6f1a1f0fb4
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

1,477
monitoring-stackict-platformVerified publisher0.4.03 of 13See more

monitoring-stack ict-platform 0.4.0

3 of the 13 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/loki:3.6.73c8fd3570dd9
go.opentelemetry.io/otel@v1.38.0
1.41.0
ghcr.io/grafana/alloy-operator:1.7.02ce23f948e02
go.opentelemetry.io/otel@v1.37.0
1.41.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

9,573
infisical-pki-issuerinfisical-charts1.0.01 of 1See more

infisical-pki-issuer infisical-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
infisical/pki-issuer:latestff38294270e3
go.opentelemetry.io/otel@v1.39.0
1.41.0

Open the chart page →

566
influxdbinfluxdb20.1.01 of 1See more

influxdb influxdb2 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
library/influxdb:latestf75e48af0598
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

2,333
athens-proxyjenkins-x0.2.21 of 2See more

athens-proxy jenkins-x 0.2.2

1 of the 2 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:latestab6f1a1f0fb4
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

1,336
corednsjouveVerified publisher1.45.01 of 1See more

coredns jouve 1.45.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
coredns/coredns:1.13.19b9128672209
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

887
daily-restartjuniorjpdj0.1.691 of 1See more

daily-restart juniorjpdj 0.1.69

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/juniorjpdj/containers/openssl-kubectl:1.36.1-r358afba209ea0
go.opentelemetry.io/otel@v1.39.0
1.41.0

Open the chart page →

458
mumbledjjuniorjpdj0.1.1991 of 2See more

mumbledj juniorjpdj 0.1.199

1 of the 2 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/juniorjpdj/containers/openssl-kubectl:1.36.1-r358afba209ea0
go.opentelemetry.io/otel@v1.39.0
1.41.0

Open the chart page →

953
nginx-gateway-fabricjupyter-jscVerified publisher2.4.11 of 1See more

nginx-gateway-fabric jupyter-jsc 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/nginx/nginx-gateway-fabric:2.4.180f3a0a51af5
go.opentelemetry.io/otel@v1.39.0
1.41.0

Open the chart page →

359
thanosk8sonlabVerified publisher1.1.71 of 1See more

thanos k8sonlab 1.1.7

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
thanosio/thanos:v0.41.0cf3e9b292e43
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

592
kagentkagent0.10.11 of 6See more

kagent kagent 0.10.1

1 of the 6 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/kagent-dev/kagent/tools:0.2.150b431281d3e
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

2,900
authentikkagiso-me0.1.11 of 1See more

authentik kagiso-me 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/goauthentik/server:2026.2.146a71d75dfd3
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

4,568
dockerdkarljorgensen0.1.01 of 1See more

dockerd karljorgensen 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
library/docker:28.5.2-dind2a232a42256f
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

2,034
k10restorekastenVerified publisher8.0.141 of 1See more

k10restore kasten 8.0.14

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
gcr.io/kasten-images/restorectl:8.0.145a0884f9a90c
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

1,459
metallbkomailo-helm-charts1.2.43 of 4See more

metallb komailo-helm-charts 1.2.4

3 of the 4 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
quay.io/metallb/controller:v0.16.1f51ab515de9c
go.opentelemetry.io/otel@v1.40.0
1.41.0
quay.io/metallb/frr-k8s:v0.0.251cb06fb2d553
go.opentelemetry.io/otel@v1.40.0
1.41.0
quay.io/metallb/speaker:v0.16.116561e96531e
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

2,127
airflow-operatorkubedoopVerified publisher0.4.01 of 1See more

airflow-operator kubedoop 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
quay.io/zncdatadev/airflow-operator:0.4.0b716ef483b75
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

390
hdfs-operatorkubedoopVerified publisher0.4.01 of 1See more

hdfs-operator kubedoop 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
quay.io/zncdatadev/hdfs-operator:0.4.0eb3c2928250e
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

390
secret-operatorkubedoopVerified publisher0.4.01 of 5See more

secret-operator kubedoop 0.4.0

1 of the 5 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
quay.io/zncdatadev/secret-csi-driver:0.4.0604a7d98ab58
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

4,341
cloudflaredkubernetes-homelab-helm-chartsVerified publisher0.1.11 of 1See more

cloudflared kubernetes-homelab-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2026.3.06b599ca3e974
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

1,437
easegresskubesphere-stable1.0.01 of 1See more

easegress kubesphere-stable 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
megaease/easegress:latestfad1c7452958
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

1,308
kubiya-runnerkubiya-helm-chartsOfficialVerified publisher0.9.41 of 9See more

kubiya-runner kubiya-helm-charts 0.9.4

1 of the 9 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/kubiyabot/tool-manager:0.5.80cca6760763a
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

20,204
openidkvalitetsitVerified publisher1.7.21 of 2See more

openid kvalitetsit 1.7.2

1 of the 2 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
quay.io/oauth2-proxy/oauth2-proxy:v7.14.368336da945bd
go.opentelemetry.io/otel@v1.39.0
1.41.0

Open the chart page →

586
everest-lakefs-csi-driverlakefsVerified publisher1.3.02 of 3See more

everest-lakefs-csi-driver lakefs 1.3.0

2 of the 3 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
public.ecr.aws/csi-components/csi-node-driver-registrar:v2.16.0-eksbuild.3592d7034d6c7
go.opentelemetry.io/otel@v1.40.0
1.41.0
public.ecr.aws/csi-components/livenessprobe:v2.18.0-eksbuild.38e307f4e5820
go.opentelemetry.io/otel@v1.39.0
1.41.0

Open the chart page →

841
uptime-kumalbenicio-communityVerified publisher0.1.11 of 1See more

uptime-kuma lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

33,242
linode-blockstorage-csi-driverlinode-blockstorage-csi-driverOfficialVerified publisher1.1.44 of 5See more

linode-blockstorage-csi-driver linode-blockstorage-csi-driver 1.1.4

4 of the 5 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-attacher:v4.11.0b74b05b39501
go.opentelemetry.io/otel@v1.38.0
1.41.0
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.16.0ab482308a492
go.opentelemetry.io/otel@v1.40.0
1.41.0
registry.k8s.io/sig-storage/csi-provisioner:v6.2.06be9f63ca4ca
go.opentelemetry.io/otel@v1.40.0
1.41.0
registry.k8s.io/sig-storage/csi-resizer:v2.1.0589e525cddef
go.opentelemetry.io/otel@v1.39.0
1.41.0

Open the chart page →

2,932

Container images carrying it

339 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/dapr/operator:1.17.0-rc.3d5cc61cbe735
go.opentelemetry.io/otel@v1.39.0
1.41.0
1
ghcr.io/dapr/placement:1.17.0-rc.3a237b43cd5c6
go.opentelemetry.io/otel@v1.39.0
1.41.0
1
ghcr.io/dapr/scheduler:1.17.0-rc.36c62e01e736b
go.opentelemetry.io/otel@v1.39.0
1.41.0
1
ghcr.io/dapr/sentry:1.17.0-rc.3bf79b03591e0
go.opentelemetry.io/otel@v1.39.0
1.41.0
1
ghcr.io/devops-ia/steampipe:v2.4.1a982103d91d3
go.opentelemetry.io/otel@v1.40.0
1.41.0
1
ghcr.io/dexidp/dex:v2.44.05d0656fce7d4
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
ghcr.io/digitalis-io/vals-operator:v0.8.17c776499b8c9
go.opentelemetry.io/otel@v1.39.0
1.41.0
1
ghcr.io/ethpandaops/benchmarkoor:latest5470b2ec3161
go.opentelemetry.io/otel@v1.39.0
1.41.0
1
ghcr.io/exalsius/exalsius-operator:0.12.0d24a579a3c75
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
ghcr.io/external-secrets/external-secrets:v2.4.19440a40b3947
go.opentelemetry.io/otel@v1.39.0
1.41.0
1
ghcr.io/external-secrets/external-secrets:v2.1.0ec40c3d9c48f
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
ghcr.io/ferretdb/ferretdb:2.7.05706414241eb
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
ghcr.io/flanksource/postgres:17.6-497383cebcf66281fc1
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
ghcr.io/formancehq/membership:v1.11.024a0113d5fb0
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
ghcr.io/gla-rad/mc-mms-router:latest032e977d9adf
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
ghcr.io/glassflow/glassflow-etl-migration:v3.2.07db1a1bf3dae
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
ghcr.io/goauthentik/server:2026.2.146a71d75dfd3
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
ghcr.io/gomenhashai/gomenhashai:v1.3.36f031172a5ec
go.opentelemetry.io/otel@v1.36.0
1.41.0
1
ghcr.io/grafana/alloy-operator:1.3.02088dcb22aaa
go.opentelemetry.io/otel@v1.36.0
1.41.0
1
ghcr.io/grafana/alloy-operator:1.7.02ce23f948e02
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
ghcr.io/grafana/alloy-operator:1.8.1ae85d68749c7
go.opentelemetry.io/otel@v1.40.0
1.41.0
1
ghcr.io/gurucomputing/headscale-ui:2026.03.17015f5ba04bcb
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
ghcr.io/idebeijer/gameserver-operator:latest1b099cfe9e5e
go.opentelemetry.io/otel@v1.36.0
1.41.0
1
ghcr.io/imgproxy/imgproxy:v3.30.074c1bee92e04
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
ghcr.io/interlink-hq/interlink/virtual-kubelet-inttw:latest0e05a7b49c33
go.opentelemetry.io/otel@v1.36.0
1.41.0
1
ghcr.io/invergent-ai/surogate-hub:latest6d4106724d56
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
ghcr.io/kagent-dev/kagent/tools:0.2.150b431281d3e
go.opentelemetry.io/otel@v1.40.0
1.41.0
1
ghcr.io/kagent-dev/kagent/tools:0.0.13c8882543f693
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
ghcr.io/kanisterio/controller:0.118.0d22616a5998b
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
ghcr.io/kedify/otel-add-on:v0.1.4a6f2155bd822
go.opentelemetry.io/otel@v1.40.0
1.41.0
1
ghcr.io/kluster-manager/cluster-gateway:v1.12.158bed8d1e7fc
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
ghcr.io/kluster-manager/cluster-gateway-manager:v1.12.1f22cae0e6cf3
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
ghcr.io/kluster-manager/cluster-proxy:v0.10.1a7fce69e171c
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
ghcr.io/kluster-manager/fluxcd-addon:v0.0.103475404bef5c
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
ghcr.io/kluster-manager/managed-serviceaccount:v0.10.0fc256885915b
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
ghcr.io/kluster-manager/registration-operator:v1.2.00cbced8e6240
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
ghcr.io/kubevault/vault-operator:v0.24.00087cb49616f
go.opentelemetry.io/otel@v1.40.0
1.41.0
1
ghcr.io/kubiyabot/tool-manager:0.5.80cca6760763a
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
ghcr.io/loafoe/go-hello-world:v2.13.0d3fb171f20e1
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
ghcr.io/lockdep/stackradar-scanner:0.3.0dd8a35d50c2d
go.opentelemetry.io/otel@v1.39.0
1.41.0
1
ghcr.io/loft-sh/kubernetes:v1.35.090097a08b87c
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
ghcr.io/lukaszraczylo/jobs-manager-operator:0.1.15e6239e2838d7
go.opentelemetry.io/otel@v1.39.0
1.41.0
1
ghcr.io/lukaszraczylo/kubernetes-images-sync-operator:0.5.57a424948c8143
go.opentelemetry.io/otel@v1.39.0
1.41.0
1
ghcr.io/melancholictheory/wellcake:0.8.12fd2678f07ef
go.opentelemetry.io/otel@v1.36.0
1.41.0
1
ghcr.io/ncsa/jupyterhub-metrics/collector:1.3.0dcb8c731bb1b
go.opentelemetry.io/otel@v1.36.0
1.41.0
1
ghcr.io/nginx/nginx-gateway-fabric:2.4.180f3a0a51af5
go.opentelemetry.io/otel@v1.39.0
1.41.0
1
ghcr.io/nnstd/glauth:2.52e6e09fa77dd
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
ghcr.io/nnstd/seaweedfs-operator:1.43ebe2fd253f6
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
ghcr.io/openconfig/gnmic:0.45.0d422a9ebd4a2
go.opentelemetry.io/otel@v1.40.0
1.41.0
1
ghcr.io/openlit/openlit:1.24.02434560e8f0e
go.opentelemetry.io/otel@v1.39.0
1.41.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.