StackRadar

CVE-2026-29181

High

Advisory

Published 7 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.008
54th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
344
of 17,781 indexed, latest versions
Container images
339
deployed by those charts
Fix available
1 of 1
affected package

OpenTelemetry-Go: multi-value `baggage` header extraction causes excessive allocations (remote dos amplification)

Carried by container images the latest versions of 344 of 17,781 indexed charts deploy, on 339 images.

Affected packageAffected versionsFixed inImages
go.opentelemetry.io/otelgolangv1.36.0, v1.37.0, v1.38.0, v1.39.0+2 more1.41.0339
OSV records
GHSA-mh2q-q3fh-2475
Also known as
GO-2026-5506

Charts affected

344 by stars
ChartLatestAffected imagesRadar Score
uptime-kumaloeken-at-homeVerified publisher2.3.21 of 1See more

uptime-kuma loeken-at-home 2.3.2

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

33,242
vcluster-headloftVerified publisher0.0.0-035ec6e1 of 2See more

vcluster-head loft 0.0.0-035ec6e

1 of the 2 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/kubernetes:v1.35.090097a08b87c
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

1,269
loki-proxyloki-proxyVerified publisher0.4.11 of 1See more

loki-proxy loki-proxy 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/peak-scale/observability-tenancy/loki-proxy:0.4.1548e962d0061
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

782
istio-helm-cnimesosphere1.25.11 of 1See more

istio-helm-cni mesosphere 1.25.1

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
istio/install-cni:1.29.0ce27c9ce43c8
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

2,533
istio-helm-istiodmesosphere1.25.12 of 2See more

istio-helm-istiod mesosphere 1.25.1

2 of the 2 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
istio/pilot:1.29.0325156535773
go.opentelemetry.io/otel@v1.38.0
1.41.0
mesosphere/kubectl:v1.35.0-alpineea01a9387771
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

3,777
kube-prometheus-stackmesosphere87.16.01 of 7See more

kube-prometheus-stack mesosphere 87.16.0

1 of the 7 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/grafana:13.1.0121a7a9ece6d
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

7,398
prometheus-operatormesosphere12.11.132 of 8See more

prometheus-operator mesosphere 12.11.13

2 of the 8 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/grafana:12.3.39e1e77ade304
go.opentelemetry.io/otel@v1.39.0
1.41.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

11,689
istio-helm-istiodmesosphere-stable1.23.61 of 2See more

istio-helm-istiod mesosphere-stable 1.23.6

1 of the 2 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
mesosphere/kubectl:v1.35.0-alpineea01a9387771
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

4,603
kube-prometheus-stackmesosphere-stable75.9.11 of 7See more

kube-prometheus-stack mesosphere-stable 75.9.1

1 of the 7 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-operator:v0.83.0b6a89b8ec08f
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

10,180
mw-autoinstrumentationmiddleware-labsVerified publisher1.2.61 of 6See more

mw-autoinstrumentation middleware-labs 1.2.6

1 of the 6 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.132.05e331c925091
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

3,713
mollysocketmollysocket-wrenixVerified publisher0.1.141 of 2See more

mollysocket mollysocket-wrenix 0.1.14

1 of the 2 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
alpine/kubectl:1.35.3c4a11ae9a1cb
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

2,521
grafana-chartmy-personal-grafana0.1.01 of 1See more

grafana-chart my-personal-grafana 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

720
jupyterhub-metricsncsaVerified publisher1.3.03 of 5See more

jupyterhub-metrics ncsa 1.3.0

3 of the 5 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
go.opentelemetry.io/otel@v1.40.0
1.41.0
migrate/migrate:latestcc4ad8e19d66
go.opentelemetry.io/otel@v1.37.0
1.41.0
ghcr.io/ncsa/jupyterhub-metrics/collector:1.3.0dcb8c731bb1b
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

4,132
ciliumnicklasfrahm-ciliumVerified publisher0.7.44 of 6See more

cilium nicklasfrahm-cilium 0.7.4

4 of the 6 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
quay.io/cilium/cilium:v1.18.2858f807ea4e2
go.opentelemetry.io/otel@v1.37.0
1.41.0
quay.io/cilium/hubble-relay:v1.18.26079308ee15e
go.opentelemetry.io/otel@v1.37.0
1.41.0
quay.io/cilium/hubble-ui-backend:v0.13.3db1454e45dc3
go.opentelemetry.io/otel@v1.37.0
1.41.0
quay.io/cilium/operator-generic:v1.18.2cb4e4ffc5789
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

7,092
firehose-ethereumnodeifyVerified publisher1.7.11 of 2See more

firehose-ethereum nodeify 1.7.1

1 of the 2 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/go-ethereum:geth-v1.16.9-fh3.08e3cb38953a3
go.opentelemetry.io/otel@v1.39.0
1.41.0

Open the chart page →

5,565
lensoci-ai-incubations0.1.144 of 16See more

lens oci-ai-incubations 0.1.14

4 of the 16 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/grafana:12.1.1a1701c218024
go.opentelemetry.io/otel@v1.36.0
1.41.0
quay.io/prometheus-operator/prometheus-config-reloader:v0.85.0ebb560bcb6bd
go.opentelemetry.io/otel@v1.37.0
1.41.0
quay.io/prometheus/prometheus:v3.5.063805ebb8d2b
go.opentelemetry.io/otel@v1.36.0
1.41.0
registry.k8s.io/ingress-nginx/controller:v1.13.21f7eaeb01933
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

17,070
ocisocis-community0.1.01 of 1See more

ocis ocis-community 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
owncloud/ocis:8.0.1b38fd8fdd58f
go.opentelemetry.io/otel@v1.39.0
1.41.0

Open the chart page →

2,346
dynamic-scoring-frameworkocm-helm-chartsVerified publisher0.1.02 of 2See more

dynamic-scoring-framework ocm-helm-charts 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
quay.io/open-cluster-management/dynamic-scoring-addon:latest7e571a08ec1a
go.opentelemetry.io/otel@v1.37.0
1.41.0
quay.io/open-cluster-management/dynamic-scoring-controller:latest587f5bc8f2ed
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

967
managed-serviceaccountocm-helm-chartsVerified publisher0.10.01 of 1See more

managed-serviceaccount ocm-helm-charts 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
quay.io/open-cluster-management/managed-serviceaccount:v0.10.0d6284bd7765a
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

1,033
agents-sandbox-controlleropenkruise0.3.01 of 1See more

agents-sandbox-controller openkruise 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
openkruise/agent-sandbox-controller:v0.3.0e0a3bf7c0dc5
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

260
kruise-gameopenkruise1.1.01 of 1See more

kruise-game openkruise 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
openkruise/kruise-game-manager:v1.1.0d3c6d69d2c39
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

911
openlitopenlit1.24.01 of 3See more

openlit openlit 1.24.0

1 of the 3 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/openlit/openlit:1.24.02434560e8f0e
go.opentelemetry.io/otel@v1.39.0
1.41.0

Open the chart page →

5,017
harikubeopenshift0.16.31 of 3See more

harikube openshift 0.16.3

1 of the 3 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
quay.io/harikube/vcluster-pro:0.32.1b741efae8d31
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

2,525
kb-cloud-installeropenshift2.1.351 of 1See more

kb-cloud-installer openshift 2.1.35

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
apecloud/kb-cloud-installer:v2.1.42-certified98abc64aa985
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

4,127
kubedb-certifiedopenshift2026.7.102 of 8See more

kubedb-certified openshift 2026.7.10

2 of the 8 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/appscode/petset:v0.1.093fa0daf603c
go.opentelemetry.io/otel@v1.40.0
1.41.0
ghcr.io/appscode/sidekick:v0.0.15d1036b07e348
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

4,016
kubestash-certifiedopenshift2026.7.101 of 2See more

kubestash-certified openshift 2026.7.10

1 of the 2 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/kubestash/kubestash:v0.29.043e01ed32486
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

1,090
voyager-gatewayopenshift2026.1.152 of 2See more

voyager-gateway openshift 2026.1.15

2 of the 2 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/voyagermesh/crd-manager:v0.1.013fd0cccafe8
go.opentelemetry.io/otel@v1.37.0
1.41.0
ghcr.io/voyagermesh/gateway:v1.6.223f4da194134
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

2,567
operator-lifecycle-manageroperator-lifecycle-manager1.2.22 of 2See more

operator-lifecycle-manager operator-lifecycle-manager 1.2.2

2 of the 2 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
quay.io/operator-framework/catalogd:v1.8.06ff40fa6257f
go.opentelemetry.io/otel@v1.40.0
1.41.0
quay.io/operator-framework/operator-controller:v1.8.0bca5dfcc67ca
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

1,821
origin-ca-issuerorigin-ca-issuer0.6.91 of 1See more

origin-ca-issuer origin-ca-issuer 0.6.9

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
cloudflare/origin-ca-issuer:v0.14.4c92ef5ac7e4b
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

336
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.01 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

1 of the 40 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
gcr.io/kaniko-project/executor:latest4e7a52dd1f14
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

71,208
otel-add-onotel-add-onVerified publisher0.1.41 of 1See more

otel-add-on otel-add-on 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/kedify/otel-add-on:v0.1.4a6f2155bd822
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

725
parcaparca-rr0.1.02 of 2See more

parca parca-rr 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/parca-dev/parca:v0.24.23776500fde82
go.opentelemetry.io/otel@v1.37.0
1.41.0
ghcr.io/parca-dev/parca-agent:v0.42.0adc0eeb4dd05
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

2,366
parcial-1parcial-1-chart1.0.01 of 5See more

parcial-1 parcial-1-chart 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.13.137e489b22ac7
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

3,844
pax-prometheuspaxtecnologia0.7.01 of 8See more

pax-prometheus paxtecnologia 0.7.0

1 of the 8 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/grafana:13.2.1-distroless3600073f45a9
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

1,826
pmm-ha-dependenciespercona1.0.01 of 4See more

pmm-ha-dependencies percona 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
percona/percona-postgresql-operator:2.8.06cce2698d3f5
go.opentelemetry.io/otel@v1.38.0
1.41.0

Open the chart page →

2,431
planectlplanectlVerified publisher0.7.01 of 10See more

planectl planectl 0.7.0

1 of the 10 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
pulumi/pulumi-kubernetes-operator:v2.5.17dace4491358
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

25,934
prismeai-appsprismeai0.7.11 of 4See more

prismeai-apps prismeai 0.7.1

1 of the 4 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-infra:latestb1198ea741d1
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

2,751
prismeai-coreprismeai1.12.11 of 7See more

prismeai-core prismeai 1.12.1

1 of the 7 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-infra:latestb1198ea741d1
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

3,270
loki-stackpyalive-cdmswebappVerified publisher2.6.51 of 4See more

loki-stack pyalive-cdmswebapp 2.6.5

1 of the 4 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

6,525
rancher-auto-registerrancher-auto-registerVerified publisher0.1.01 of 1See more

rancher-auto-register rancher-auto-register 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
registry.gitlab.com/xrow-public/ci-tools/tools:main9b9d1ed86b6a
go.opentelemetry.io/otel@v1.39.0
1.41.0

Open the chart page →

1,837
thanosrayselfs-chartsVerified publisher0.1.51 of 1See more

thanos rayselfs-charts 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.40.1aae7b2b030ed
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

750
harvester-csi-driverrke2-charts0.1.31002 of 6See more

harvester-csi-driver rke2-charts 0.1.3100

2 of the 6 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
rancher/mirrored-longhornio-csi-node-driver-registrar:v2.16.0-20260428e82a8c8f800d
go.opentelemetry.io/otel@v1.40.0
1.41.0
rancher/mirrored-longhornio-csi-provisioner:v5.3.0-202604289e519a21a77c
go.opentelemetry.io/otel@v1.39.0
1.41.0

Open the chart page →

2,688
monitoringrocketchat-server0.0.173 of 9See more

monitoring rocketchat-server 0.0.17

3 of the 9 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/loki:3.6.3cd6e176883a9
go.opentelemetry.io/otel@v1.38.0
1.41.0
otel/opentelemetry-collector-contrib:0.143.03bc07732530c
go.opentelemetry.io/otel@v1.39.0
1.41.0
quay.io/prometheus-operator/prometheus-operator:v0.83.0b6a89b8ec08f
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

6,859
jaegerromanow-helm-chartsVerified publisher1.7.31 of 1See more

jaeger romanow-helm-charts 1.7.3

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
jaegertracing/jaeger:2.9.0e128b9adbb29
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

1,597
migrantromholdings0.0.31 of 1See more

migrant romholdings 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
migrate/migrate:latestcc4ad8e19d66
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

734
acme-linoderotationalVerified publisher1.0.41 of 1See more

acme-linode rotational 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
rotationalio/linode-acme-webhook:1.0.0cc7bb030a20f
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

1,308
runwhen-localrunwhen-contribVerified publisher0.6.171 of 3See more

runwhen-local runwhen-contrib 0.6.17

1 of the 3 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
ghcr.io/runwhen-contrib/runwhen-local:0.12.0533ce58c6e02
go.opentelemetry.io/otel@v1.36.0
1.41.0

Open the chart page →

3,707
rybbitrybbit-helm1.3.01 of 7See more

rybbit rybbit-helm 1.3.0

1 of the 7 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
alpine/k8s:1.32.12048f8d9c8cc7
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

5,819
speedtestsantisbon0.1.01 of 3See more

speedtest santisbon 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
go.opentelemetry.io/otel@v1.40.0
1.41.0

Open the chart page →

12,668
grafanasb-helm-charts0.4.01 of 1See more

grafana sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-29181.

Container imageDigestPackageFixed in
grafana/grafana:12.2.22ebef928d7e5
go.opentelemetry.io/otel@v1.37.0
1.41.0

Open the chart page →

1,795

Container images carrying it

339 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
grafana/grafana:latestf772d434e8fa
go.opentelemetry.io/otel@v1.40.0
1.41.0
12
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
go.opentelemetry.io/otel@v1.37.0
1.41.0
12
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.15.011f199f6bec4
go.opentelemetry.io/otel@v1.36.0
1.41.0
7
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.16.0ab482308a492
go.opentelemetry.io/otel@v1.40.0
1.41.0
7
registry.k8s.io/sig-storage/csi-resizer:v2.1.0589e525cddef
go.opentelemetry.io/otel@v1.39.0
1.41.0
7
grafana/grafana:13.2.1-distroless3600073f45a9
go.opentelemetry.io/otel@v1.40.0
1.41.0
5
registry.k8s.io/sig-storage/csi-attacher:v4.11.0b74b05b39501
go.opentelemetry.io/otel@v1.38.0
1.41.0
5
registry.k8s.io/sig-storage/csi-provisioner:v6.2.06be9f63ca4ca
go.opentelemetry.io/otel@v1.40.0
1.41.0
5
registry.k8s.io/sig-storage/csi-snapshotter:v8.5.0da081c27e8a6
go.opentelemetry.io/otel@v1.40.0
1.41.0
5
cloudflare/cloudflared:2026.3.06b599ca3e974
go.opentelemetry.io/otel@v1.40.0
1.41.0
4
grafana/grafana:13.1.0121a7a9ece6d
go.opentelemetry.io/otel@v1.40.0
1.41.0
4
grafana/loki:3.6.73c8fd3570dd9
go.opentelemetry.io/otel@v1.38.0
1.41.0
4
grafana/tempo:2.9.065a578975943
go.opentelemetry.io/otel@v1.38.0
1.41.0
4
ghcr.io/appscode/petset:v0.1.093fa0daf603c
go.opentelemetry.io/otel@v1.40.0
1.41.0
4
ghcr.io/kubestash/kubestash:v0.29.043e01ed32486
go.opentelemetry.io/otel@v1.36.0
1.41.0
4
registry.k8s.io/sig-storage/livenessprobe:v2.18.0c4cc074199c0
go.opentelemetry.io/otel@v1.39.0
1.41.0
4
grafana/loki-canary:3.6.70dac7d5cb383
go.opentelemetry.io/otel@v1.38.0
1.41.0
3
jaegertracing/all-in-one:latestab6f1a1f0fb4
go.opentelemetry.io/otel@v1.38.0
1.41.0
3
migrate/migrate:latestcc4ad8e19d66
go.opentelemetry.io/otel@v1.37.0
1.41.0
3
ghcr.io/appscode/sidekick:v0.0.15d1036b07e348
go.opentelemetry.io/otel@v1.36.0
1.41.0
3
ghcr.io/dexidp/dex:v2.45.18499afd690c4
go.opentelemetry.io/otel@v1.39.0
1.41.0
3
ghcr.io/sigstore/scaffolding/ct_server:v0.7.3166664ba563e7
go.opentelemetry.io/otel@v1.38.0
1.41.0
3
ghcr.io/voyagermesh/crd-manager:v0.3.0e67f14e5c853
go.opentelemetry.io/otel@v1.40.0
1.41.0
3
quay.io/prometheus/prometheus:v3.10.07571a304e67f
go.opentelemetry.io/otel@v1.40.0
1.41.0
3
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.14.05244abbe87e0
go.opentelemetry.io/otel@v1.36.0
1.41.0
3
alpine/k8s:1.32.12048f8d9c8cc7
go.opentelemetry.io/otel@v1.37.0
1.41.0
2
alpine/kubectl:1.35.2ec8f734b0a10
go.opentelemetry.io/otel@v1.36.0
1.41.0
2
bloomberg/goldpinger:3.11.2a1fb87c2e9d9
go.opentelemetry.io/otel@v1.39.0
1.41.0
2
coredns/coredns:1.13.19b9128672209
go.opentelemetry.io/otel@v1.37.0
1.41.0
2
grafana/alloy:v1.12.2f94b1c82957a
go.opentelemetry.io/otel@v1.38.0
1.41.0
2
grafana/grafana:12.3.12175aaa91c96
go.opentelemetry.io/otel@v1.38.0
1.41.0
2
grafana/grafana:12.3.39e1e77ade304
go.opentelemetry.io/otel@v1.39.0
1.41.0
2
grafana/grafana:12.4.1e932bd6ed0e0
go.opentelemetry.io/otel@v1.39.0
1.41.0
2
helmforge/kubectl:1.35.3c3f97e954c47
go.opentelemetry.io/otel@v1.36.0
1.41.0
2
louislam/uptime-kuma:2.3.29aeb4e51d038
go.opentelemetry.io/otel@v1.40.0
1.41.0
2
mesosphere/kubectl:v1.35.0-alpineea01a9387771
go.opentelemetry.io/otel@v1.36.0
1.41.0
2
samcm/ethereum-metrics-exporter:0.29.2:latest91a2d9a015c1
go.opentelemetry.io/otel@v1.37.0
1.41.0
2
thanosio/thanos:v0.41.0cf3e9b292e43
go.opentelemetry.io/otel@v1.38.0
1.41.0
2
ghcr.io/appscode/license-proxyserver:v0.1.1e192ad567e0b
go.opentelemetry.io/otel@v1.40.0
1.41.0
2
ghcr.io/appscode/service-provider:v0.0.2f6e481386d70
go.opentelemetry.io/otel@v1.36.0
1.41.0
2
ghcr.io/celestiaorg/celestia-node:v0.27.5-mocha4768ea1c5fd2
go.opentelemetry.io/otel@v1.37.0
1.41.0
2
ghcr.io/glassflow/glassflow-etl-k8s-operator:v3.2.1e70364e88629
go.opentelemetry.io/otel@v1.38.0
1.41.0
2
ghcr.io/juniorjpdj/containers/openssl-kubectl:1.36.1-r358afba209ea0
go.opentelemetry.io/otel@v1.39.0
1.41.0
2
ghcr.io/kluster-manager/cluster-auth:v0.5.1fba6fb872281
go.opentelemetry.io/otel@v1.38.0
1.41.0
2
quay.io/argoproj/argo-events:v1.9.11fa07b2c9ece6
go.opentelemetry.io/otel@v1.36.0
1.41.0
2
quay.io/argoproj/argo-rollouts:v1.10.0187630ba7228
go.opentelemetry.io/otel@v1.39.0
1.41.0
2
quay.io/coreos/etcd:v3.6.12702d7b4881c6
go.opentelemetry.io/otel@v1.40.0
1.41.0
2
quay.io/kubevirt/kubevirt-cloud-controller-manager:v0.6.037ad4c475941
go.opentelemetry.io/otel@v1.39.0
1.41.0
2
quay.io/metallb/controller:v0.16.1f51ab515de9c
go.opentelemetry.io/otel@v1.40.0
1.41.0
2
quay.io/metallb/frr-k8s:v0.0.251cb06fb2d553
go.opentelemetry.io/otel@v1.40.0
1.41.0
2

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.