StackRadar

CVE-2026-29181

High

Advisory

Published 7 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.008
54th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
343
of 17,787 indexed, latest versions
Container images
336
deployed by those charts
Fix available
1 of 1
affected package

OpenTelemetry-Go: multi-value `baggage` header extraction causes excessive allocations (remote dos amplification)

Carried by container images the latest versions of 343 of 17,787 indexed charts deploy, on 336 images.

Affected packageAffected versionsFixed inImages
go.opentelemetry.io/otelgolangv1.36.0, v1.37.0, v1.38.0, v1.39.0+2 more1.41.0336
OSV records
GHSA-mh2q-q3fh-2475
Also known as
GO-2026-5506

Charts affected

343 by stars
ChartLatestAffected imagesRadar Score
vcluster-headloftVerified publisher0.0.0-035ec6e1 of 2See more

vcluster-head loft 0.0.0-035ec6e

1 of the 2 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/kubernetes:v1.35.090097a08b87c
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

1,269
loki-proxyloki-proxyVerified publisher0.4.11 of 1See more

loki-proxy loki-proxy 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/peak-scale/observability-tenancy/loki-proxy:0.4.1548e962d0061
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

782
istio-helm-cnimesosphere1.25.11 of 1See more

istio-helm-cni mesosphere 1.25.1

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
istio/install-cni:1.29.0ce27c9ce43c8
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

2,533
istio-helm-istiodmesosphere1.25.12 of 2See more

istio-helm-istiod mesosphere 1.25.1

2 of the 2 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
istio/pilot:1.29.0325156535773
go.opentelemetry.io/otel@v1.38.0
1.41.0
mesosphere/kubectl:v1.35.0-alpineea01a9387771
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

3,777
kube-prometheus-stackmesosphere87.16.01 of 7See more

kube-prometheus-stack mesosphere 87.16.0

1 of the 7 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/grafana:13.1.0121a7a9ece6d
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

7,398
prometheus-operatormesosphere12.11.132 of 8See more

prometheus-operator mesosphere 12.11.13

2 of the 8 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/grafana:12.3.39e1e77ade304
go.opentelemetry.io/otel@v1.39.0
1.41.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

11,689
istio-helm-istiodmesosphere-stable1.23.61 of 2See more

istio-helm-istiod mesosphere-stable 1.23.6

1 of the 2 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
mesosphere/kubectl:v1.35.0-alpineea01a9387771
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

4,603
kube-prometheus-stackmesosphere-stable75.9.11 of 7See more

kube-prometheus-stack mesosphere-stable 75.9.1

1 of the 7 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-operator:v0.83.0b6a89b8ec08f
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

10,180
mw-autoinstrumentationmiddleware-labsVerified publisher1.2.61 of 6See more

mw-autoinstrumentation middleware-labs 1.2.6

1 of the 6 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.132.05e331c925091
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

3,713
mollysocketmollysocket-wrenixVerified publisher0.1.141 of 2See more

mollysocket mollysocket-wrenix 0.1.14

1 of the 2 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
alpine/kubectl:1.35.3c4a11ae9a1cb
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

2,521
grafana-chartmy-personal-grafana0.1.01 of 1See more

grafana-chart my-personal-grafana 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

720
jupyterhub-metricsncsaVerified publisher1.3.03 of 5See more

jupyterhub-metrics ncsa 1.3.0

3 of the 5 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
go.opentelemetry.io/otel@v1.40.0
1.41.0
migrate/migrate:latestcc4ad8e19d66
go.opentelemetry.io/otel@v1.37.0
1.41.0
ghcr.io/ncsa/jupyterhub-metrics/collector:1.3.0dcb8c731bb1b
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

4,132
ciliumnicklasfrahm-ciliumVerified publisher0.7.44 of 6See more

cilium nicklasfrahm-cilium 0.7.4

4 of the 6 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
quay.io/cilium/cilium:v1.18.2858f807ea4e2
go.opentelemetry.io/otel@v1.37.0
1.41.0
quay.io/cilium/hubble-relay:v1.18.26079308ee15e
go.opentelemetry.io/otel@v1.37.0
1.41.0
quay.io/cilium/hubble-ui-backend:v0.13.3db1454e45dc3
go.opentelemetry.io/otel@v1.37.0
1.41.0
quay.io/cilium/operator-generic:v1.18.2cb4e4ffc5789
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

7,092
firehose-ethereumnodeifyVerified publisher1.7.11 of 2See more

firehose-ethereum nodeify 1.7.1

1 of the 2 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/go-ethereum:geth-v1.16.9-fh3.08e3cb38953a3
go.opentelemetry.io/otel@v1.39.0
1.41.0

Open the chart page →

5,565
lensoci-ai-incubations0.1.144 of 16See more

lens oci-ai-incubations 0.1.14

4 of the 16 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/grafana:12.1.1a1701c218024
go.opentelemetry.io/otel@v1.36.0
1.41.0
quay.io/prometheus-operator/prometheus-config-reloader:v0.85.0ebb560bcb6bd
go.opentelemetry.io/otel@v1.37.0
1.41.0
quay.io/prometheus/prometheus:v3.5.063805ebb8d2b
go.opentelemetry.io/otel@v1.36.0
1.41.0
registry.k8s.io/ingress-nginx/controller:v1.13.21f7eaeb01933
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

17,070
ocisocis-community0.1.01 of 1See more

ocis ocis-community 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
owncloud/ocis:8.0.1b38fd8fdd58f
go.opentelemetry.io/otel@v1.39.0
1.41.0

Open the chart page →

2,346
dynamic-scoring-frameworkocm-helm-chartsVerified publisher0.1.02 of 2See more

dynamic-scoring-framework ocm-helm-charts 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
quay.io/open-cluster-management/dynamic-scoring-addon:latest7e571a08ec1a
go.opentelemetry.io/otel@v1.37.0
1.41.0
quay.io/open-cluster-management/dynamic-scoring-controller:latest587f5bc8f2ed
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

967
managed-serviceaccountocm-helm-chartsVerified publisher0.10.01 of 1See more

managed-serviceaccount ocm-helm-charts 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
quay.io/open-cluster-management/managed-serviceaccount:v0.10.0d6284bd7765a
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

1,033
agents-sandbox-controlleropenkruise0.3.01 of 1See more

agents-sandbox-controller openkruise 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
openkruise/agent-sandbox-controller:v0.3.0e0a3bf7c0dc5
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

260
kruise-gameopenkruise1.1.01 of 1See more

kruise-game openkruise 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
openkruise/kruise-game-manager:v1.1.0d3c6d69d2c39
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

911
openlitopenlit1.24.01 of 3See more

openlit openlit 1.24.0

1 of the 3 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/openlit/openlit:1.24.02434560e8f0e
go.opentelemetry.io/otel@v1.39.0
1.41.0

Open the chart page →

5,017
harikubeopenshift0.16.31 of 3See more

harikube openshift 0.16.3

1 of the 3 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
quay.io/harikube/vcluster-pro:0.32.1b741efae8d31
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

2,525
kb-cloud-installeropenshift2.1.351 of 1See more

kb-cloud-installer openshift 2.1.35

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
apecloud/kb-cloud-installer:v2.1.42-certified98abc64aa985
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

4,127
kubedb-certifiedopenshift2026.7.102 of 8See more

kubedb-certified openshift 2026.7.10

2 of the 8 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/appscode/petset:v0.1.093fa0daf603c
go.opentelemetry.io/otel@v1.40.0
1.41.0
ghcr.io/appscode/sidekick:v0.0.15d1036b07e348
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

4,016
kubestash-certifiedopenshift2026.7.101 of 2See more

kubestash-certified openshift 2026.7.10

1 of the 2 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/kubestash/kubestash:v0.29.043e01ed32486
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

1,090
voyager-gatewayopenshift2026.1.152 of 2See more

voyager-gateway openshift 2026.1.15

2 of the 2 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/voyagermesh/crd-manager:v0.1.013fd0cccafe8
go.opentelemetry.io/otel@v1.37.0
1.41.0
ghcr.io/voyagermesh/gateway:v1.6.223f4da194134
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

2,567
operator-lifecycle-manageroperator-lifecycle-manager1.2.22 of 2See more

operator-lifecycle-manager operator-lifecycle-manager 1.2.2

2 of the 2 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
quay.io/operator-framework/catalogd:v1.8.06ff40fa6257f
go.opentelemetry.io/otel@v1.40.0
1.41.0
quay.io/operator-framework/operator-controller:v1.8.0bca5dfcc67ca
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

1,821
origin-ca-issuerorigin-ca-issuer0.6.91 of 1See more

origin-ca-issuer origin-ca-issuer 0.6.9

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
cloudflare/origin-ca-issuer:v0.14.4c92ef5ac7e4b
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

336
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.01 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

1 of the 40 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
gcr.io/kaniko-project/executor:latest4e7a52dd1f14
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

71,208
otel-add-onotel-add-onVerified publisher0.1.41 of 1See more

otel-add-on otel-add-on 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/kedify/otel-add-on:v0.1.4a6f2155bd822
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

725
parcaparca-rr0.1.02 of 2See more

parca parca-rr 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/parca-dev/parca:v0.24.23776500fde82
go.opentelemetry.io/otel@v1.37.0
1.41.0
ghcr.io/parca-dev/parca-agent:v0.42.0adc0eeb4dd05
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

2,366
parcial-1parcial-1-chart1.0.01 of 5See more

parcial-1 parcial-1-chart 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.13.137e489b22ac7
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

3,844
pax-prometheuspaxtecnologia0.7.01 of 8See more

pax-prometheus paxtecnologia 0.7.0

1 of the 8 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/grafana:13.2.1-distroless3600073f45a9
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

1,826
pmm-ha-dependenciespercona1.0.01 of 4See more

pmm-ha-dependencies percona 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
percona/percona-postgresql-operator:2.8.06cce2698d3f5
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

2,431
planectlplanectlVerified publisher0.7.01 of 10See more

planectl planectl 0.7.0

1 of the 10 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
pulumi/pulumi-kubernetes-operator:v2.5.17dace4491358
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

25,934
prismeai-appsprismeai0.7.11 of 4See more

prismeai-apps prismeai 0.7.1

1 of the 4 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-infra:latestb1198ea741d1
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

2,751
prismeai-coreprismeai1.12.11 of 7See more

prismeai-core prismeai 1.12.1

1 of the 7 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-infra:latestb1198ea741d1
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

3,270
loki-stackpyalive-cdmswebappVerified publisher2.6.51 of 4See more

loki-stack pyalive-cdmswebapp 2.6.5

1 of the 4 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

6,525
rancher-auto-registerrancher-auto-registerVerified publisher0.1.01 of 1See more

rancher-auto-register rancher-auto-register 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
registry.gitlab.com/xrow-public/ci-tools/tools:main9b9d1ed86b6a
go.opentelemetry.io/otel@v1.39.0
1.41.0

Open the chart page →

1,837
thanosrayselfs-chartsVerified publisher0.1.51 of 1See more

thanos rayselfs-charts 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.40.1aae7b2b030ed
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

750
harvester-csi-driverrke2-charts0.1.31002 of 6See more

harvester-csi-driver rke2-charts 0.1.3100

2 of the 6 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
rancher/mirrored-longhornio-csi-node-driver-registrar:v2.16.0-20260428e82a8c8f800d
go.opentelemetry.io/otel@v1.40.0
1.41.0
rancher/mirrored-longhornio-csi-provisioner:v5.3.0-202604289e519a21a77c
go.opentelemetry.io/otel@v1.39.0
1.41.0

Open the chart page →

2,688
monitoringrocketchat-server0.0.173 of 9See more

monitoring rocketchat-server 0.0.17

3 of the 9 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/loki:3.6.3cd6e176883a9
go.opentelemetry.io/otel@v1.38.0
1.41.0
otel/opentelemetry-collector-contrib:0.143.03bc07732530c
go.opentelemetry.io/otel@v1.39.0
1.41.0
quay.io/prometheus-operator/prometheus-operator:v0.83.0b6a89b8ec08f
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

6,859
jaegerromanow-helm-chartsVerified publisher1.7.31 of 1See more

jaeger romanow-helm-charts 1.7.3

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
jaegertracing/jaeger:2.9.0e128b9adbb29
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

1,597
migrantromholdings0.0.31 of 1See more

migrant romholdings 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
migrate/migrate:latestcc4ad8e19d66
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

734
acme-linoderotationalVerified publisher1.0.41 of 1See more

acme-linode rotational 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
rotationalio/linode-acme-webhook:1.0.0cc7bb030a20f
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

1,308
runwhen-localrunwhen-contribVerified publisher0.6.171 of 3See more

runwhen-local runwhen-contrib 0.6.17

1 of the 3 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/runwhen-contrib/runwhen-local:0.12.0533ce58c6e02
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

3,707
rybbitrybbit-helm1.3.01 of 7See more

rybbit rybbit-helm 1.3.0

1 of the 7 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
alpine/k8s:1.32.12048f8d9c8cc7
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

5,819
speedtestsantisbon0.1.01 of 3See more

speedtest santisbon 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

12,668
grafanasb-helm-charts0.4.01 of 1See more

grafana sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/grafana:12.2.22ebef928d7e5
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

1,795
lokisb-helm-charts0.4.01 of 1See more

loki sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/loki:3.6.192bd5700577b
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

803

Container images carrying it

336 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/opnpulse/perses:v2026.4.24b880da90aa1a
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
ghcr.io/opnpulse/thanos-operator:v2026.4.24e05a3e701291
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
ghcr.io/parca-dev/parca:v0.24.23776500fde82
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
ghcr.io/parca-dev/parca-agent:v0.42.0adc0eeb4dd05
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
ghcr.io/parmincloud/arvancloud-certmanager-issuer:v1.0.00b97452674a3
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
ghcr.io/peak-scale/capsule-argo-addon:0.7.5087a80163971
go.opentelemetry.io/otel@v1.36.0
1.41.0
1
ghcr.io/peak-scale/observability-tenancy/loki-proxy:0.4.1548e962d0061
go.opentelemetry.io/otel@v1.36.0
1.41.0
1
ghcr.io/reiche-world/traefik-secrets-exporter:0.0.21485ff93cbf9
go.opentelemetry.io/otel@v1.36.0
1.41.0
1
ghcr.io/runatlantis/atlantis:v0.47.1511231955463
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
ghcr.io/runwhen-contrib/runwhen-local:0.12.0533ce58c6e02
go.opentelemetry.io/otel@v1.36.0
1.41.0
1
ghcr.io/sergelogvinov/hybrid-csi-provisioner:v0.3.1221e07794a8a
go.opentelemetry.io/otel@v1.39.0
1.41.0
1
ghcr.io/sergelogvinov/mongosync:1.15.0fa99ed475f03
go.opentelemetry.io/otel@v1.36.0
1.41.0
1
ghcr.io/shopware/shopware-operator:1.8.187db0eda7a03
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
ghcr.io/streamingfast/go-ethereum:geth-v1.16.9-fh3.08e3cb38953a3
go.opentelemetry.io/otel@v1.39.0
1.41.0
1
ghcr.io/strrl/supabase-operator:2026.7.2587d083ab8980
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
ghcr.io/supabase-community/supabase-operator:v0.1.3253a6dcbf4f0
go.opentelemetry.io/otel@v1.36.0
1.41.0
1
ghcr.io/terminus-io/enforcer:v1.1.0f21b905610d6
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
ghcr.io/topolvm/topolvm-with-sidecar:0.41.170548dbe0c6a
go.opentelemetry.io/otel@v1.40.0
1.41.0
1
ghcr.io/voyagermesh/crd-manager:v0.1.013fd0cccafe8
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
ghcr.io/voyagermesh/gateway:v1.6.223f4da194134
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
ghcr.io/voyagermesh/voyager:v17.5.04964ceaf9d35
go.opentelemetry.io/otel@v1.40.0
1.41.0
1
ghcr.io/wasilak/go-hello-world:1.8.366d353e7693f
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-node-driver-registrar:v2.14.06cb172e3de7e
go.opentelemetry.io/otel@v1.36.0
1.41.0
1
public.ecr.aws/aws-containers/retail-store-sample-catalog:1.3.0b654b266fa32
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
public.ecr.aws/aws-ec2/aws-node-termination-handler:v1.25.69ad31fb4e5be
go.opentelemetry.io/otel@v1.40.0
1.41.0
1
public.ecr.aws/buildkite/agent-metrics:v5.11.016e7f5c7161e
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
public.ecr.aws/csi-components/csi-node-driver-registrar:v2.16.0-eksbuild.3592d7034d6c7
go.opentelemetry.io/otel@v1.40.0
1.41.0
1
public.ecr.aws/csi-components/livenessprobe:v2.18.0-eksbuild.38e307f4e5820
go.opentelemetry.io/otel@v1.39.0
1.41.0
1
public.ecr.aws/datadog/agent:7.73.0f4925b15ce94
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
public.ecr.aws/groundcovercom/grafana-groundcover:v0.0.54-grafana11.3.7ee9d973e3952
go.opentelemetry.io/otel@v1.40.0
1.41.0
1
public.ecr.aws/groundcovercom/kong/kubernetes-ingress-controller:3.5.3-20260205bf9db911deed
go.opentelemetry.io/otel@v1.36.0
1.41.0
1
public.ecr.aws/k4y9r6y5/kratos:v25.4.0e8014c6c58b6
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
quay.io/argoproj/argocd:v3.1.1a36ab0c0860c
go.opentelemetry.io/otel@v1.36.0
1.41.0
1
quay.io/argoproj/argocli:v3.7.11577fc18f86ad
go.opentelemetry.io/otel@v1.40.0
1.41.0
1
quay.io/argoproj/argocli:v3.7.16efd1cb89dc1
go.opentelemetry.io/otel@v1.36.0
1.41.0
1
quay.io/argoproj/argo-events:v1.9.10a83d2699ae53
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
quay.io/argoproj/workflow-controller:v3.7.166388d1b2f08
go.opentelemetry.io/otel@v1.36.0
1.41.0
1
quay.io/argoproj/workflow-controller:v3.7.11c46aa0ded8ed
go.opentelemetry.io/otel@v1.40.0
1.41.0
1
quay.io/backube/volsync:0.16.00d03a6aad575
go.opentelemetry.io/otel@v1.36.0
1.41.0
1
quay.io/cephcsi/ceph-csi-operator:v0.5.014fe2f1bffc3
go.opentelemetry.io/otel@v1.36.0
1.41.0
1
quay.io/cephcsi/ceph-csi-operator:v1.0.4c62933fd4083
go.opentelemetry.io/otel@v1.40.0
1.41.0
1
quay.io/cilium/cilium:v1.18.2858f807ea4e2
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
quay.io/cilium/hubble-relay:v1.18.26079308ee15e
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
quay.io/cilium/hubble-ui-backend:v0.13.3db1454e45dc3
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
quay.io/cilium/operator-generic:v1.18.2cb4e4ffc5789
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
quay.io/cortexproject/cortex:v1.21.18577eb292a01
go.opentelemetry.io/otel@v1.40.0
1.41.0
1
quay.io/harikube/vcluster-pro:0.32.1b741efae8d31
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
quay.io/hpestorage/csi-driver:v3.2.0ef7f4e1544fa
go.opentelemetry.io/otel@v1.39.0
1.41.0
1
quay.io/hpestorage/volume-group-snapshotter:v1.0.10caeaaffe7e2b
go.opentelemetry.io/otel@v1.39.0
1.41.0
1
quay.io/kiali/kiali:v2.23.07652b1285f50
go.opentelemetry.io/otel@v1.39.0
1.41.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.