StackRadar

CVE-2026-29181

High

Advisory

Published 7 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.008
54th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
344
of 17,781 indexed, latest versions
Container images
339
deployed by those charts
Fix available
1 of 1
affected package

OpenTelemetry-Go: multi-value `baggage` header extraction causes excessive allocations (remote dos amplification)

Carried by container images the latest versions of 344 of 17,781 indexed charts deploy, on 339 images.

Affected packageAffected versionsFixed inImages
go.opentelemetry.io/otelgolangv1.36.0, v1.37.0, v1.38.0, v1.39.0+2 more1.41.0339
OSV records
GHSA-mh2q-q3fh-2475
Also known as
GO-2026-5506

Charts affected

344 by stars
ChartLatestAffected imagesRadar Score
lokisb-helm-charts0.4.01 of 1See more

loki sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/loki:3.6.192bd5700577b
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

803
promtailsb-helm-charts0.4.01 of 1See more

promtail sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/promtail:3.6.18dcfdf466da0
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

2,202
temposb-helm-charts0.4.01 of 1See more

tempo sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/tempo:2.9.065a578975943
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

923
seaweedfs-operatorseaweedfs-operatorVerified publisher1.5.81 of 3See more

seaweedfs-operator seaweedfs-operator 1.5.8

1 of the 3 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/nnstd/seaweedfs-operator:1.43ebe2fd253f6
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

2,092
semaphoresemaphore-light1.0.01 of 1See more

semaphore semaphore-light 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
semaphoreui/semaphore:latest3996804607eb
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

1,674
ccx-monitoringseveralnines0.6.211 of 7See more

ccx-monitoring severalnines 0.6.21

1 of the 7 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/grafana:12.3.12175aaa91c96
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

7,708
operatorshopware-storeVerified publisher1.8.11 of 1See more

operator shopware-store 1.8.1

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/shopware/shopware-operator:1.8.187db0eda7a03
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

571
bffshortlink0.2.11 of 1See more

bff shortlink 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
registry.gitlab.com/shortlink-org/shortlink/bff:latestf2194e526915
go.opentelemetry.io/otel@v1.39.0
1.41.0

Open the chart page →

1,690
linkshortlink0.7.31 of 1See more

link shortlink 0.7.3

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
registry.gitlab.com/shortlink-org/shortlink/link:latest86d87291ffd4
go.opentelemetry.io/otel@v1.39.0
1.41.0

Open the chart page →

1,674
ctlogsigstoreVerified publisher0.2.681 of 4See more

ctlog sigstore 0.2.68

1 of the 4 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/sigstore/scaffolding/ct_server:v0.7.3166664ba563e7
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

2,728
mongosyncsinextraVerified publisher0.4.01 of 1See more

mongosync sinextra 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/mongosync:1.15.0fa99ed475f03
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

2,815
tailscalesinextraVerified publisher0.18.11 of 2See more

tailscale sinextra 0.18.1

1 of the 2 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
registry.k8s.io/coredns/coredns:v1.13.294caebb89dcf
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

1,047
skypilot-prometheus-serverskypilotVerified publisher0.11.11 of 3See more

skypilot-prometheus-server skypilot 0.11.1

1 of the 3 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-config-reloader:v0.83.078aec597d87a
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

2,344
kube-prometheus-stacksoftonic81.5.13 of 6See more

kube-prometheus-stack softonic 81.5.1

3 of the 6 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/grafana:12.3.2ba93c9d192e5
go.opentelemetry.io/otel@v1.38.0
1.41.0
quay.io/prometheus-operator/prometheus-operator:v0.88.1d3d65efa3bee
go.opentelemetry.io/otel@v1.39.0
1.41.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

4,974
ocean-vpaspot1.0.72 of 4See more

ocean-vpa spot 1.0.7

2 of the 4 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
registry.k8s.io/autoscaling/vpa-admission-controller:1.6.080e487edff02
go.opentelemetry.io/otel@v1.40.0
1.41.0
registry.k8s.io/autoscaling/vpa-updater:1.6.0b39d1dfa19cb
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

1,195
retail-store-sample-catalog-chartstacksimplifyVerified publisher2.0.01 of 1See more

retail-store-sample-catalog-chart stacksimplify 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
public.ecr.aws/aws-containers/retail-store-sample-catalog:1.3.0b654b266fa32
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

759
supabase-operatorstrrl-helm2026.7.251 of 1See more

supabase-operator strrl-helm 2026.7.25

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/strrl/supabase-operator:2026.7.2587d083ab8980
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

223
stunner-prometheusstunner0.2.11 of 4See more

stunner-prometheus stunner 0.2.1

1 of the 4 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

3,025
group-challengesubshell-labVerified publisher2.1.01 of 2See more

group-challenge subshell-lab 2.1.0

1 of the 2 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
darthsim/imgproxy:v3.29.17d12c7c8fc66
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

2,540
supabase-operatorsupabse0.1.31 of 1See more

supabase-operator supabse 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/supabase-community/supabase-operator:v0.1.3253a6dcbf4f0
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

223
surogate-hubsurogate-hubVerified publisher2.1.51 of 1See more

surogate-hub surogate-hub 2.1.5

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/invergent-ai/surogate-hub:latest6d4106724d56
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

3,460
csi-hcloudsyself1.3.11 of 6See more

csi-hcloud syself 1.3.1

1 of the 6 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.14.05244abbe87e0
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

2,460
act-runnertektonops0.1.21 of 2See more

act-runner tektonops 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
gitea/act_runner:nightly7940221bcfc9
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

4,212
pingmetektonops0.1.21 of 1See more

pingme tektonops 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
khaliq/pingme:v0.2.749f96888d2ab
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

1,253
terminusterminusVerified publisher1.1.01 of 1See more

terminus terminus 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/terminus-io/enforcer:v1.1.0f21b905610d6
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

631
todolist-charttodolist-chart0.1.71 of 10See more

todolist-chart todolist-chart 0.1.7

1 of the 10 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

6,973
traefik-secrets-exportertraefik-secrets-exporter0.0.21 of 1See more

traefik-secrets-exporter traefik-secrets-exporter 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/reiche-world/traefik-secrets-exporter:0.0.21485ff93cbf9
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

1,675
trivy-webhook-aws-security-hubtrivy-webhook-aws-security-hubVerified publisher0.1.201 of 1See more

trivy-webhook-aws-security-hub trivy-webhook-aws-security-hub 0.1.20

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/csepulveda/trivy-webhook-aws-security-hub:v0.1.206836b779b060
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

616
tfy-agenttruefoundryVerified publisher0.2.1031 of 5See more

tfy-agent truefoundry 0.2.103

1 of the 5 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/external-secrets/external-secrets:v2.4.19440a40b3947
go.opentelemetry.io/otel@v1.39.0
1.41.0

Open the chart page →

681
truefoundry-monitoringtruefoundryVerified publisher0.1.63 of 8See more

truefoundry-monitoring truefoundry 0.1.6

3 of the 8 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/grafana:12.3.070d9599b186c
go.opentelemetry.io/otel@v1.38.0
1.41.0
quay.io/prometheus-operator/prometheus-operator:v0.88.0b4f51de53357
go.opentelemetry.io/otel@v1.39.0
1.41.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

4,526
vals-operatorvals-operatorVerified publisher0.8.11 of 1See more

vals-operator vals-operator 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/digitalis-io/vals-operator:v0.8.17c776499b8c9
go.opentelemetry.io/otel@v1.39.0
1.41.0

Open the chart page →

696
devportalveecode-platform-nextVerified publisher0.1.211 of 1See more

devportal veecode-platform-next 0.1.21

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
veecode/devportaldigest-pinnedc443520aebf7
go.opentelemetry.io/otel@v1.39.0
1.41.0

Open the chart page →

1,787
corednsvks-helm-chartsVerified publisher1.45.01 of 1See more

coredns vks-helm-charts 1.45.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
coredns/coredns:1.13.19b9128672209
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

887
volcanovolcano-sh1.15.21 of 3See more

volcano volcano-sh 1.15.2

1 of the 3 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
volcanosh/vc-webhook-manager:v1.15.22fff65aad011
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

1,533
vulcanvulcan0.2.21 of 2See more

vulcan vulcan 0.2.2

1 of the 2 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
mitre/vulcan:latest2bc4dfb8150f
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

1,516
aih-scannerwallarmVerified publisher2.7.111 of 2See more

aih-scanner wallarm 2.7.11

1 of the 2 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
wallarm/aih-scanner:2.7.11f1cb26db1f5b
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

3,911
wallarm-oobwallarmVerified publisher0.23.01 of 3See more

wallarm-oob wallarm 0.23.0

1 of the 3 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
wallarm/node-native-processing:0.23.07db2da8fce0b
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

2,824
azure-resourcemanager-exporterwebdevopsVerified publisher1.3.61 of 1See more

azure-resourcemanager-exporter webdevops 1.3.6

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
webdevops/azure-resourcemanager-exporter:26.1.0d3e1842ad419
go.opentelemetry.io/otel@v1.39.0
1.41.0

Open the chart page →

536
valkey-operatorwellcakeVerified publisher0.8.11 of 1See more

valkey-operator wellcake 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/melancholictheory/wellcake:0.8.12fd2678f07ef
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

110
argo-eventswenerme2.4.271 of 1See more

argo-events wenerme 2.4.27

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
quay.io/argoproj/argo-events:v1.9.11fa07b2c9ece6
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

969
argo-rolloutswenerme2.43.11 of 1See more

argo-rollouts wenerme 2.43.1

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
quay.io/argoproj/argo-rollouts:v1.10.0187630ba7228
go.opentelemetry.io/otel@v1.39.0
1.41.0

Open the chart page →

115
athens-proxywenerme0.5.21 of 2See more

athens-proxy wenerme 0.5.2

1 of the 2 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:latestab6f1a1f0fb4
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

4,984
xonodepoolsxonodepoolsOfficialVerified publisher1.0.71 of 1See more

xonodepools xonodepools 1.0.7

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
xosphere/xonodepools:1.0.71458097b6f85
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

388
prometheus-monitoring-stackyotron-helm-charts1.2.01 of 3See more

prometheus-monitoring-stack yotron-helm-charts 1.2.0

1 of the 3 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

878

Container images carrying it

339 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/open-telemetry/demo:3.0.0-opamp-server62cfae32adb1
go.opentelemetry.io/otel@v1.39.0
1.41.0
1
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.132.05e331c925091
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.144.079b81912f1fb
go.opentelemetry.io/otel@v1.39.0
1.41.0
1
ghcr.io/opnpulse/perses:v2026.4.24b880da90aa1a
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
ghcr.io/opnpulse/thanos-operator:v2026.4.24e05a3e701291
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
ghcr.io/parca-dev/parca:v0.24.23776500fde82
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
ghcr.io/parca-dev/parca-agent:v0.42.0adc0eeb4dd05
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
ghcr.io/parmincloud/arvancloud-certmanager-issuer:v1.0.00b97452674a3
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
ghcr.io/peak-scale/capsule-argo-addon:0.7.5087a80163971
go.opentelemetry.io/otel@v1.36.0
1.41.0
1
ghcr.io/peak-scale/observability-tenancy/loki-proxy:0.4.1548e962d0061
go.opentelemetry.io/otel@v1.36.0
1.41.0
1
ghcr.io/reiche-world/traefik-secrets-exporter:0.0.21485ff93cbf9
go.opentelemetry.io/otel@v1.36.0
1.41.0
1
ghcr.io/runatlantis/atlantis:v0.47.1511231955463
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
ghcr.io/runwhen-contrib/runwhen-local:0.12.0533ce58c6e02
go.opentelemetry.io/otel@v1.36.0
1.41.0
1
ghcr.io/sergelogvinov/hybrid-csi-provisioner:v0.3.1221e07794a8a
go.opentelemetry.io/otel@v1.39.0
1.41.0
1
ghcr.io/sergelogvinov/mongosync:1.15.0fa99ed475f03
go.opentelemetry.io/otel@v1.36.0
1.41.0
1
ghcr.io/shopware/shopware-operator:1.8.187db0eda7a03
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
ghcr.io/streamingfast/go-ethereum:geth-v1.16.9-fh3.08e3cb38953a3
go.opentelemetry.io/otel@v1.39.0
1.41.0
1
ghcr.io/strrl/supabase-operator:2026.7.2587d083ab8980
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
ghcr.io/supabase-community/supabase-operator:v0.1.3253a6dcbf4f0
go.opentelemetry.io/otel@v1.36.0
1.41.0
1
ghcr.io/terminus-io/enforcer:v1.1.0f21b905610d6
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
ghcr.io/topolvm/topolvm-with-sidecar:0.41.170548dbe0c6a
go.opentelemetry.io/otel@v1.40.0
1.41.0
1
ghcr.io/voyagermesh/crd-manager:v0.1.013fd0cccafe8
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
ghcr.io/voyagermesh/gateway:v1.6.223f4da194134
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
ghcr.io/voyagermesh/voyager:v17.5.04964ceaf9d35
go.opentelemetry.io/otel@v1.40.0
1.41.0
1
ghcr.io/wasilak/go-hello-world:1.8.366d353e7693f
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-node-driver-registrar:v2.14.06cb172e3de7e
go.opentelemetry.io/otel@v1.36.0
1.41.0
1
public.ecr.aws/aws-containers/retail-store-sample-catalog:1.3.0b654b266fa32
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
public.ecr.aws/aws-ec2/aws-node-termination-handler:v1.25.69ad31fb4e5be
go.opentelemetry.io/otel@v1.40.0
1.41.0
1
public.ecr.aws/buildkite/agent-metrics:v5.11.016e7f5c7161e
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
public.ecr.aws/csi-components/csi-node-driver-registrar:v2.16.0-eksbuild.3592d7034d6c7
go.opentelemetry.io/otel@v1.40.0
1.41.0
1
public.ecr.aws/csi-components/livenessprobe:v2.18.0-eksbuild.38e307f4e5820
go.opentelemetry.io/otel@v1.39.0
1.41.0
1
public.ecr.aws/datadog/agent:7.73.0f4925b15ce94
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
public.ecr.aws/groundcovercom/grafana-groundcover:v0.0.54-grafana11.3.7ee9d973e3952
go.opentelemetry.io/otel@v1.40.0
1.41.0
1
public.ecr.aws/groundcovercom/kong/kubernetes-ingress-controller:3.5.3-20260205bf9db911deed
go.opentelemetry.io/otel@v1.36.0
1.41.0
1
public.ecr.aws/k4y9r6y5/kratos:v25.4.0e8014c6c58b6
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
quay.io/argoproj/argocd:v3.1.1a36ab0c0860c
go.opentelemetry.io/otel@v1.36.0
1.41.0
1
quay.io/argoproj/argocli:v3.7.11577fc18f86ad
go.opentelemetry.io/otel@v1.40.0
1.41.0
1
quay.io/argoproj/argocli:v3.7.16efd1cb89dc1
go.opentelemetry.io/otel@v1.36.0
1.41.0
1
quay.io/argoproj/argo-events:v1.9.10a83d2699ae53
go.opentelemetry.io/otel@v1.38.0
1.41.0
1
quay.io/argoproj/workflow-controller:v3.7.166388d1b2f08
go.opentelemetry.io/otel@v1.36.0
1.41.0
1
quay.io/argoproj/workflow-controller:v3.7.11c46aa0ded8ed
go.opentelemetry.io/otel@v1.40.0
1.41.0
1
quay.io/backube/volsync:0.16.00d03a6aad575
go.opentelemetry.io/otel@v1.36.0
1.41.0
1
quay.io/cephcsi/ceph-csi-operator:v0.5.014fe2f1bffc3
go.opentelemetry.io/otel@v1.36.0
1.41.0
1
quay.io/cephcsi/ceph-csi-operator:v1.0.4c62933fd4083
go.opentelemetry.io/otel@v1.40.0
1.41.0
1
quay.io/cilium/cilium:v1.18.2858f807ea4e2
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
quay.io/cilium/hubble-relay:v1.18.26079308ee15e
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
quay.io/cilium/hubble-ui-backend:v0.13.3db1454e45dc3
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
quay.io/cilium/operator-generic:v1.18.2cb4e4ffc5789
go.opentelemetry.io/otel@v1.37.0
1.41.0
1
quay.io/cortexproject/cortex:v1.21.18577eb292a01
go.opentelemetry.io/otel@v1.40.0
1.41.0
1
quay.io/harikube/vcluster-pro:0.32.1b741efae8d31
go.opentelemetry.io/otel@v1.38.0
1.41.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.