StackRadar

CVE-2026-29181

High

Advisory

Published 7 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.008
54th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
344
of 17,781 indexed, latest versions
Container images
339
deployed by those charts
Fix available
1 of 1
affected package

OpenTelemetry-Go: multi-value `baggage` header extraction causes excessive allocations (remote dos amplification)

Carried by container images the latest versions of 344 of 17,781 indexed charts deploy, on 339 images.

Affected packageAffected versionsFixed inImages
go.opentelemetry.io/otelgolangv1.36.0, v1.37.0, v1.38.0, v1.39.0+2 more1.41.0339
OSV records
GHSA-mh2q-q3fh-2475
Also known as
GO-2026-5506

Charts affected

344 by stars
ChartLatestAffected imagesRadar Score
kube-prometheus-stackprometheus-communityOfficialVerified publisher90.2.01 of 6See more

kube-prometheus-stack prometheus-community 90.2.0

1 of the 6 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/grafana:13.2.1-distroless3600073f45a9
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

740
argo-cdargoOfficialVerified publisher10.9.01 of 3See more

argo-cd argo 10.9.0

1 of the 3 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.45.18499afd690c4
go.opentelemetry.io/otel@v1.39.0
1.41.0

Open the chart page →

3,218
metallbmetallbVerified publisher0.16.13 of 4See more

metallb metallb 0.16.1

3 of the 4 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
quay.io/metallb/controller:v0.16.1f51ab515de9c
go.opentelemetry.io/otel@v1.40.0
1.41.0
quay.io/metallb/frr-k8s:v0.0.251cb06fb2d553
go.opentelemetry.io/otel@v1.40.0
1.41.0
quay.io/metallb/speaker:v0.16.116561e96531e
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

2,127
artifact-hubartifact-hubVerified publisher1.23.03 of 7See more

artifact-hub artifact-hub 1.23.0

3 of the 7 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
aquasec/trivy:0.69.3bcc376de8d77
go.opentelemetry.io/otel@v1.40.0
1.41.0
artifacthub/scanner:v1.23.02d8365601f0e
go.opentelemetry.io/otel@v1.40.0
1.41.0
artifacthub/tracker:v1.23.05368d21a6e5c
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

10,755
argo-rolloutsargoOfficialVerified publisher2.43.11 of 1See more

argo-rollouts argo 2.43.1

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
quay.io/argoproj/argo-rollouts:v1.10.0187630ba7228
go.opentelemetry.io/otel@v1.39.0
1.41.0

Open the chart page →

115
argo-cdargo-cd-oci10.9.01 of 3See more

argo-cd argo-cd-oci 10.9.0

1 of the 3 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.45.18499afd690c4
go.opentelemetry.io/otel@v1.39.0
1.41.0

Open the chart page →

3,218
dexdexVerified publisher0.24.11 of 1See more

dex dex 0.24.1

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.44.05d0656fce7d4
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

1,765
rook-cephrookOfficialVerified publisher1.20.71 of 2See more

rook-ceph rook 1.20.7

1 of the 2 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
quay.io/cephcsi/ceph-csi-operator:v1.0.4c62933fd4083
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

1,447
argo-eventsargoOfficialVerified publisher2.4.271 of 1See more

argo-events argo 2.4.27

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
quay.io/argoproj/argo-events:v1.9.11fa07b2c9ece6
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

969
grafanagrafana-communityVerified publisher13.2.41 of 1See more

grafana grafana-community 13.2.4

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/grafana:13.2.1-distroless3600073f45a9
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

431
openebsopenebsOfficialVerified publisher4.6.11 of 35See more

openebs openebs 4.6.1

1 of the 35 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-provisioner:v6.1.0e5900dc98b0d
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

23,894
node-problem-detectordeliveryheroVerified publisher2.4.11 of 1See more

node-problem-detector deliveryhero 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
registry.k8s.io/node-problem-detector/node-problem-detector:v1.35.1c380751accc5
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

1,955
ceph-csi-cephfsceph-csiOfficialVerified publisher3.17.15 of 6See more

ceph-csi-cephfs ceph-csi 3.17.1

5 of the 6 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-attacher:v4.11.0b74b05b39501
go.opentelemetry.io/otel@v1.38.0
1.41.0
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.16.0ab482308a492
go.opentelemetry.io/otel@v1.40.0
1.41.0
registry.k8s.io/sig-storage/csi-provisioner:v6.2.06be9f63ca4ca
go.opentelemetry.io/otel@v1.40.0
1.41.0
registry.k8s.io/sig-storage/csi-resizer:v2.1.0589e525cddef
go.opentelemetry.io/otel@v1.39.0
1.41.0
registry.k8s.io/sig-storage/csi-snapshotter:v8.5.0da081c27e8a6
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

4,061
ceph-csi-rbdceph-csiOfficialVerified publisher3.17.15 of 6See more

ceph-csi-rbd ceph-csi 3.17.1

5 of the 6 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-attacher:v4.11.0b74b05b39501
go.opentelemetry.io/otel@v1.38.0
1.41.0
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.16.0ab482308a492
go.opentelemetry.io/otel@v1.40.0
1.41.0
registry.k8s.io/sig-storage/csi-provisioner:v6.2.06be9f63ca4ca
go.opentelemetry.io/otel@v1.40.0
1.41.0
registry.k8s.io/sig-storage/csi-resizer:v2.1.0589e525cddef
go.opentelemetry.io/otel@v1.39.0
1.41.0
registry.k8s.io/sig-storage/csi-snapshotter:v8.5.0da081c27e8a6
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

4,061
atlantisatlantis6.15.01 of 1See more

atlantis atlantis 6.15.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/runatlantis/atlantis:v0.47.1511231955463
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

1,891
semaphoresemaphoreuiOfficialVerified publisher16.2.21 of 1See more

semaphore semaphoreui 16.2.2

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
semaphoreui/semaphore:v2.18.3e9260bfa8255
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

2,221
node-local-dnsdeliveryheroVerified publisher2.9.21 of 1See more

node-local-dns deliveryhero 2.9.2

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
registry.k8s.io/dns/k8s-dns-node-cache:1.26.78b9a78d101a1
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

1,685
secrets-store-csi-driversecret-store-csi-driver1.6.12 of 4See more

secrets-store-csi-driver secret-store-csi-driver 1.6.1

2 of the 4 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.16.0ab482308a492
go.opentelemetry.io/otel@v1.40.0
1.41.0
registry.k8s.io/sig-storage/livenessprobe:v2.18.0c4cc074199c0
go.opentelemetry.io/otel@v1.39.0
1.41.0

Open the chart page →

1,766
pulsarapache4.7.03 of 10See more

pulsar apache 4.7.0

3 of the 10 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
alpine/k8s:1.32.12048f8d9c8cc7
go.opentelemetry.io/otel@v1.37.0
1.41.0
grafana/grafana:12.4.1e932bd6ed0e0
go.opentelemetry.io/otel@v1.39.0
1.41.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

9,864
vertical-pod-autoscalercowboysysopVerified publisher11.1.13 of 4See more

vertical-pod-autoscaler cowboysysop 11.1.1

3 of the 4 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
registry.k8s.io/autoscaling/vpa-admission-controller:1.5.19928d59477fb
go.opentelemetry.io/otel@v1.37.0
1.41.0
registry.k8s.io/autoscaling/vpa-recommender:1.5.1e629c61b75eb
go.opentelemetry.io/otel@v1.37.0
1.41.0
registry.k8s.io/autoscaling/vpa-updater:1.5.1cba2aa4b3239
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

6,927
pyroscopegrafana2.3.11 of 3See more

pyroscope grafana 2.3.1

1 of the 3 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/alloy:v1.12.2f94b1c82957a
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

3,157
hydraory0.64.01 of 2See more

hydra ory 0.64.0

1 of the 2 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
oryd/hydra:v26.2.0ff67c7fb5f95
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

1,156
volsyncbackube-helm-chartsVerified publisher0.16.01 of 1See more

volsync backube-helm-charts 0.16.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
quay.io/backube/volsync:0.16.00d03a6aad575
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

1,346
kratosory0.64.01 of 1See more

kratos ory 0.64.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
oryd/kratos:v26.2.02a13bb8d362c
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

866
imgproxyimgproxy1.1.01 of 1See more

imgproxy imgproxy 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/imgproxy/imgproxy:v3.30.074c1bee92e04
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

2,321
cloudflaredkubitodevVerified publisher1.7.91 of 1See more

cloudflared kubitodev 1.7.9

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2026.3.06b599ca3e974
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

1,437
argocdnicklasfrahm-argocdVerified publisher0.3.01 of 2See more

argocd nicklasfrahm-argocd 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v3.1.1a36ab0c0860c
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

5,240
falcosidekickfalcosecurity0.14.01 of 1See more

falcosidekick falcosecurity 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
falcosecurity/falcosidekick:2.32.01976da721518
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

1,633
spirespiffeVerified publisher0.30.21 of 10See more

spire spiffe 0.30.2

1 of the 10 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.15.011f199f6bec4
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

1,640
ansible-semaphorecloudhippieVerified publisher15.2.101 of 1See more

ansible-semaphore cloudhippie 15.2.10

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
semaphoreui/semaphore:v2.19.1498ad9bc7a2a0
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

1,235
kube-prometheus-stackkube-prometheus-stack-oci91.2.11 of 6See more

kube-prometheus-stack kube-prometheus-stack-oci 91.2.1

1 of the 6 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/grafana:13.2.1-distroless3600073f45a9
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

647
csi-secrets-store-provider-azurecsi-secrets-store-provider-azureVerified publisher1.8.21 of 5See more

csi-secrets-store-provider-azure csi-secrets-store-provider-azure 1.8.2

1 of the 5 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-node-driver-registrar:v2.14.06cb172e3de7e
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

2,235
openstack-cinder-csicloud-provider-openstack2.36.51 of 7See more

openstack-cinder-csi cloud-provider-openstack 2.36.5

1 of the 7 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.15.011f199f6bec4
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

3,604
hcloud-csihcloud2.23.05 of 6See more

hcloud-csi hcloud 2.23.0

5 of the 6 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-attacher:v4.11.0b74b05b39501
go.opentelemetry.io/otel@v1.38.0
1.41.0
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.16.0ab482308a492
go.opentelemetry.io/otel@v1.40.0
1.41.0
registry.k8s.io/sig-storage/csi-provisioner:v6.2.06be9f63ca4ca
go.opentelemetry.io/otel@v1.40.0
1.41.0
registry.k8s.io/sig-storage/csi-resizer:v2.1.0589e525cddef
go.opentelemetry.io/otel@v1.39.0
1.41.0
registry.k8s.io/sig-storage/livenessprobe:v2.18.0c4cc074199c0
go.opentelemetry.io/otel@v1.39.0
1.41.0

Open the chart page →

2,630
envoy-gatewayhelmforgeVerified publisher2.1.01 of 3See more

envoy-gateway helmforge 2.1.0

1 of the 3 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
helmforge/kubectl:1.35.3c3f97e954c47
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

2,379
k8s-infrasignoz0.17.11 of 1See more

k8s-infra signoz 0.17.1

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.139.0faf125d656fa
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

1,039
gatustwin1.5.01 of 1See more

gatus twin 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
twinproduction/gatus:v5.34.03fff895e77d3
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

721
cortexcortex3.3.81 of 4See more

cortex cortex 3.3.8

1 of the 4 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
quay.io/cortexproject/cortex:v1.21.18577eb292a01
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

3,897
meshery-operatormesheryOfficialVerified publisher1.0.691 of 2See more

meshery-operator meshery 1.0.69

1 of the 2 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
alpine/k8s:1.35.6b7a12c5ddf26
go.opentelemetry.io/otel@v1.39.0
1.41.0

Open the chart page →

2,415
ketoory0.64.01 of 1See more

keto ory 0.64.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
oryd/keto:v26.2.0bfdb8b9e283a
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

817
oathkeeperory0.64.01 of 1See more

oathkeeper ory 0.64.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
oryd/oathkeeper:v26.2.0467329abde34
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

769
backstagerhdh-chartVerified publisher4.0.11 of 2See more

backstage rhdh-chart 4.0.1

1 of the 2 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
quay.io/rhdh/rhdh-hub-rhel9:latest0b26358f5793
go.opentelemetry.io/otel@v1.39.0
1.41.0

Open the chart page →

1,339
tailscale-operatortailscale1.102.31 of 1See more

tailscale-operator tailscale 1.102.3

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
tailscale/k8s-operator:v1.102.3d86a8be7ad9d
go.opentelemetry.io/otel@v1.39.0
1.41.0

Open the chart page →

186
truenas-csptruenas-cspVerified publisher1.2.45 of 11See more

truenas-csp truenas-csp 1.2.4

5 of the 11 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
quay.io/hpestorage/csi-driver:v3.2.0ef7f4e1544fa
go.opentelemetry.io/otel@v1.39.0
1.41.0
quay.io/hpestorage/volume-group-snapshotter:v1.0.10caeaaffe7e2b
go.opentelemetry.io/otel@v1.39.0
1.41.0
registry.k8s.io/sig-storage/csi-provisioner:v6.2.06be9f63ca4ca
go.opentelemetry.io/otel@v1.40.0
1.41.0
registry.k8s.io/sig-storage/csi-resizer:v2.1.0589e525cddef
go.opentelemetry.io/otel@v1.39.0
1.41.0
registry.k8s.io/sig-storage/csi-snapshotter:v8.5.0da081c27e8a6
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

5,759
kubedbappscodeVerified publisher2026.7.102 of 8See more

kubedb appscode 2026.7.10

2 of the 8 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/appscode/petset:v0.1.093fa0daf603c
go.opentelemetry.io/otel@v1.40.0
1.41.0
ghcr.io/appscode/sidekick:v0.0.15d1036b07e348
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

4,016
cloudflaredartur9010Verified publisher1.0.91 of 3See more

cloudflared artur9010 1.0.9

1 of the 3 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2026.3.06b599ca3e974
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

2,984
klusterviewklusterviewVerified publisher0.1.01 of 4See more

klusterview klusterview 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

3,795
fulciosigstoreVerified publisher2.11.11 of 6See more

fulcio sigstore 2.11.1

1 of the 6 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/sigstore/scaffolding/ct_server:v0.7.3166664ba563e7
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

3,490
topolvmtopolvmVerified publisher17.2.01 of 1See more

topolvm topolvm 17.2.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/topolvm/topolvm-with-sidecar:0.41.170548dbe0c6a
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

2,316
aws-node-termination-handleraws-node-termination-handler0.27.61 of 1See more

aws-node-termination-handler aws-node-termination-handler 0.27.6

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
public.ecr.aws/aws-ec2/aws-node-termination-handler:v1.25.69ad31fb4e5be
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

525

Container images carrying it

339 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/open-telemetry/demo:3.0.0-opamp-server62cfae32adb1
go.opentelemetry.io/otel@v1.39.0
1.41.0
1
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.132.05e331c925091
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.144.079b81912f1fb
go.opentelemetry.io/otel@v1.39.0
1.41.0
1
ghcr.io/opnpulse/perses:v2026.4.24b880da90aa1a
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
ghcr.io/opnpulse/thanos-operator:v2026.4.24e05a3e701291
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
ghcr.io/parca-dev/parca:v0.24.23776500fde82
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
ghcr.io/parca-dev/parca-agent:v0.42.0adc0eeb4dd05
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
ghcr.io/parmincloud/arvancloud-certmanager-issuer:v1.0.00b97452674a3
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
ghcr.io/peak-scale/capsule-argo-addon:0.7.5087a80163971
go.opentelemetry.io/otel@v1.36.0
1.41.0
1
ghcr.io/peak-scale/observability-tenancy/loki-proxy:0.4.1548e962d0061
go.opentelemetry.io/otel@v1.36.0
1.41.0
1
ghcr.io/reiche-world/traefik-secrets-exporter:0.0.21485ff93cbf9
go.opentelemetry.io/otel@v1.36.0
1.41.0
1
ghcr.io/runatlantis/atlantis:v0.47.1511231955463
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
ghcr.io/runwhen-contrib/runwhen-local:0.12.0533ce58c6e02
go.opentelemetry.io/otel@v1.36.0
1.41.0
1
ghcr.io/sergelogvinov/hybrid-csi-provisioner:v0.3.1221e07794a8a
go.opentelemetry.io/otel@v1.39.0
1.41.0
1
ghcr.io/sergelogvinov/mongosync:1.15.0fa99ed475f03
go.opentelemetry.io/otel@v1.36.0
1.41.0
1
ghcr.io/shopware/shopware-operator:1.8.187db0eda7a03
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
ghcr.io/streamingfast/go-ethereum:geth-v1.16.9-fh3.08e3cb38953a3
go.opentelemetry.io/otel@v1.39.0
1.41.0
1
ghcr.io/strrl/supabase-operator:2026.7.2587d083ab8980
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
ghcr.io/supabase-community/supabase-operator:v0.1.3253a6dcbf4f0
go.opentelemetry.io/otel@v1.36.0
1.41.0
1
ghcr.io/terminus-io/enforcer:v1.1.0f21b905610d6
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
ghcr.io/topolvm/topolvm-with-sidecar:0.41.170548dbe0c6a
go.opentelemetry.io/otel@v1.40.0
1.41.0
1
ghcr.io/voyagermesh/crd-manager:v0.1.013fd0cccafe8
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
ghcr.io/voyagermesh/gateway:v1.6.223f4da194134
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
ghcr.io/voyagermesh/voyager:v17.5.04964ceaf9d35
go.opentelemetry.io/otel@v1.40.0
1.41.0
1
ghcr.io/wasilak/go-hello-world:1.8.366d353e7693f
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-node-driver-registrar:v2.14.06cb172e3de7e
go.opentelemetry.io/otel@v1.36.0
1.41.0
1
public.ecr.aws/aws-containers/retail-store-sample-catalog:1.3.0b654b266fa32
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
public.ecr.aws/aws-ec2/aws-node-termination-handler:v1.25.69ad31fb4e5be
go.opentelemetry.io/otel@v1.40.0
1.41.0
1
public.ecr.aws/buildkite/agent-metrics:v5.11.016e7f5c7161e
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
public.ecr.aws/csi-components/csi-node-driver-registrar:v2.16.0-eksbuild.3592d7034d6c7
go.opentelemetry.io/otel@v1.40.0
1.41.0
1
public.ecr.aws/csi-components/livenessprobe:v2.18.0-eksbuild.38e307f4e5820
go.opentelemetry.io/otel@v1.39.0
1.41.0
1
public.ecr.aws/datadog/agent:7.73.0f4925b15ce94
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
public.ecr.aws/groundcovercom/grafana-groundcover:v0.0.54-grafana11.3.7ee9d973e3952
go.opentelemetry.io/otel@v1.40.0
1.41.0
1
public.ecr.aws/groundcovercom/kong/kubernetes-ingress-controller:3.5.3-20260205bf9db911deed
go.opentelemetry.io/otel@v1.36.0
1.41.0
1
public.ecr.aws/k4y9r6y5/kratos:v25.4.0e8014c6c58b6
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
quay.io/argoproj/argocd:v3.1.1a36ab0c0860c
go.opentelemetry.io/otel@v1.36.0
1.41.0
1
quay.io/argoproj/argocli:v3.7.11577fc18f86ad
go.opentelemetry.io/otel@v1.40.0
1.41.0
1
quay.io/argoproj/argocli:v3.7.16efd1cb89dc1
go.opentelemetry.io/otel@v1.36.0
1.41.0
1
quay.io/argoproj/argo-events:v1.9.10a83d2699ae53
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
quay.io/argoproj/workflow-controller:v3.7.166388d1b2f08
go.opentelemetry.io/otel@v1.36.0
1.41.0
1
quay.io/argoproj/workflow-controller:v3.7.11c46aa0ded8ed
go.opentelemetry.io/otel@v1.40.0
1.41.0
1
quay.io/backube/volsync:0.16.00d03a6aad575
go.opentelemetry.io/otel@v1.36.0
1.41.0
1
quay.io/cephcsi/ceph-csi-operator:v0.5.014fe2f1bffc3
go.opentelemetry.io/otel@v1.36.0
1.41.0
1
quay.io/cephcsi/ceph-csi-operator:v1.0.4c62933fd4083
go.opentelemetry.io/otel@v1.40.0
1.41.0
1
quay.io/cilium/cilium:v1.18.2858f807ea4e2
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
quay.io/cilium/hubble-relay:v1.18.26079308ee15e
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
quay.io/cilium/hubble-ui-backend:v0.13.3db1454e45dc3
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
quay.io/cilium/operator-generic:v1.18.2cb4e4ffc5789
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
quay.io/cortexproject/cortex:v1.21.18577eb292a01
go.opentelemetry.io/otel@v1.40.0
1.41.0
1
quay.io/harikube/vcluster-pro:0.32.1b741efae8d31
go.opentelemetry.io/otel@v1.38.0
1.41.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.