Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/cni-plugins :v0.9.1	241592d93640	stdlib@go1.15.8	1.25.9
ghcr.io/k8snetworkplumbingwg/multus-cni :v3.7.1	e72aa733faf2	stdlib@go1.13.10	1.25.9

Open the chart page →

4,915

plexgeek-cookbook

6.4.3

1 of 1 See more

plex geek-cookbook 6.4.3

1 of the 1 container images this version deploys carry CVE-2026-32282.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/plex :v1.28.0.5999-97678ded3	ef756c7d784b	stdlib@go1.18.4	1.25.9

Open the chart page →

9,803

signal-cli-rest-apigeek-cookbook

1.2.2

1 of 1 See more

signal-cli-rest-api geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-32282.

Container image	Digest	Package	Fixed in
bbernhard/signal-cli-rest-api :0.57	549ad08d7e14	stdlib@go1.17.8	1.25.9

Open the chart page →

10,286

smarter-device-managergeek-cookbook

6.5.2

1 of 1 See more

smarter-device-manager geek-cookbook 6.5.2

1 of the 1 container images this version deploys carry CVE-2026-32282.

Container image	Digest	Package	Fixed in
registry.gitlab.com/arm-research/smarter/smarter-device-manager :v1.20.7	864fc338571e	stdlib@go1.16.4	1.25.9

Open the chart page →

2,337

statpinggeek-cookbook

6.2.0

1 of 2 See more

statping geek-cookbook 6.2.0

1 of the 2 container images this version deploys carry CVE-2026-32282.

Container image	Digest	Package	Fixed in
statping/statping :v0.90.74	e874da513a5c	stdlib@go1.14.13	1.25.9

Open the chart page →

3,378

syncthinggeek-cookbook

3.5.2

1 of 1 See more

syncthing geek-cookbook 3.5.2

1 of the 1 container images this version deploys carry CVE-2026-32282.

Container image	Digest	Package	Fixed in
syncthing/syncthing :1.18.2	966433161272	stdlib@go1.17	1.25.9

Open the chart page →

2,611

tautulligeek-cookbook

11.4.2

1 of 1 See more

tautulli geek-cookbook 11.4.2

1 of the 1 container images this version deploys carry CVE-2026-32282.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/tautulli :v2.7.7	4ea617c30397	stdlib@go1.16.7	1.25.9

Open the chart page →

10,820

traefik-forward-authgeek-cookbook

2.2.2

1 of 1 See more

traefik-forward-auth geek-cookbook 2.2.2

1 of the 1 container images this version deploys carry CVE-2026-32282.

Container image	Digest	Package	Fixed in
thomseddon/traefik-forward-auth :2.2.0	e875194d67e2	stdlib@go1.13.12	1.25.9

Open the chart page →

2,234

unifigeek-cookbook

5.1.3

1 of 1 See more

unifi geek-cookbook 5.1.3

1 of the 1 container images this version deploys carry CVE-2026-32282.

Container image	Digest	Package	Fixed in
jacobalberty/unifi :v7.4.162	b3edc809a3ff	stdlib@go1.20.4	1.25.9

Open the chart page →

11,969

ghost-on-kubernetesghost-on-kubernetes-helm

1.1.2

1 of 3 See more

ghost-on-kubernetes ghost-on-kubernetes-helm 1.1.2

1 of the 3 container images this version deploys carry CVE-2026-32282.

Container image	Digest	Package	Fixed in
library/mysql :8.4	b3b90af2a655	stdlib@go1.24.6	1.25.9

Open the chart page →

1,487

gitvotegitvote

1.5.0

2 of 6 See more

gitvote gitvote 1.5.0

2 of the 6 container images this version deploys carry CVE-2026-32282.

Container image	Digest	Package	Fixed in
artifacthub/postgres :latest	4fd34fa635cc	stdlib@go1.24.6	1.25.9
ghcr.io/cncf/gitvote/dbmigrator :v1.5.0	f1e7efe440da	stdlib@go1.25.3	1.25.9

Open the chart page →

5,678

nzbhydra2halkeye

2.30.1

1 of 2 See more

nzbhydra2 halkeye 2.30.1

1 of the 2 container images this version deploys carry CVE-2026-32282.

Container image	Digest	Package	Fixed in
binhex/arch-nzbhydra2 :3.1.0-1-01	fb8952921ab6	stdlib@go1.14	1.25.9

Open the chart page →

6,702

unifi-pollerhalkeye

0.1.2

1 of 1 See more

unifi-poller halkeye 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-32282.

Container image	Digest	Package	Fixed in
golift/unifi-poller :2.0.0	cafac968b540	stdlib@go1.13.7	1.25.9

Open the chart page →

1,654

whoamiharrytang

0.2.0

1 of 1 See more

whoami harrytang 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-32282.

Container image	Digest	Package	Fixed in
traefik/whoami :v1.11.0	200689790a0a	stdlib@go1.24.1	1.25.9

Open the chart page →

353

monitoring-stackhaukitech

0.1.11

3 of 3 See more

monitoring-stack haukitech 0.1.11

3 of the 3 container images this version deploys carry CVE-2026-32282.

Container image	Digest	Package	Fixed in
quay.io/prometheus-operator/prometheus-operator :v0.77.1	dde69a8b6f4b	stdlib@go1.23.1	1.25.9
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	stdlib@go1.22.5	1.25.9
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.14.0	37d841299325	stdlib@go1.23.3	1.25.9

Open the chart page →

2,165

prometheus-operatorhaukitech

0.1.4

1 of 1 See more

prometheus-operator haukitech 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-32282.

Container image	Digest	Package	Fixed in
quay.io/prometheus-operator/prometheus-operator :v0.77.1	dde69a8b6f4b	stdlib@go1.23.1	1.25.9

Open the chart page →

561

headscaleheadscale

1.0.19

1 of 3 See more

headscale headscale 1.0.19

1 of the 3 container images this version deploys carry CVE-2026-32282.

Container image	Digest	Package	Fixed in
alpine/k8s :1.36.2	44ef4942e171	stdlib@go1.26.0	1.25.9

Open the chart page →

3,485

health-exporterhealth-exporter

0.3.4

1 of 1 See more

health-exporter health-exporter 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-32282.

Container image	Digest	Package	Fixed in
ghcr.io/snapp-incubator/health-exporter :0.3.2	52a0d8f6278c	stdlib@go1.17.2	1.25.9

Open the chart page →

1,558

netbirdhelmforge

1.0.10

1 of 4 See more

netbird helmforge 1.0.10

1 of the 4 container images this version deploys carry CVE-2026-32282.

Container image	Digest	Package	Fixed in
library/postgres :18.6-trixie	4ef4dbc939d6	stdlib@go1.24.6	1.25.9

Open the chart page →

3,089

simple-krr-dashboardhelm-simple-krr-dashboard

1.6.2

1 of 3 See more

simple-krr-dashboard helm-simple-krr-dashboard 1.6.2

1 of the 3 container images this version deploys carry CVE-2026-32282.

Container image	Digest	Package	Fixed in
alpine/kubectl :1.35.2	ec8f734b0a10	stdlib@go1.25.7	1.25.9

Open the chart page →

2,274

helm-watchdog-pod-deletehelm-watchdog-pod-delete

0.3.0

1 of 1 See more

helm-watchdog-pod-delete helm-watchdog-pod-delete 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-32282.

Container image	Digest	Package	Fixed in
alpine/kubectl :1.34.1	8413f8890d19	stdlib@go1.24.6	1.25.9

Open the chart page →

1,153

home-assistanthome-assistant

0.5.10

1 of 3 See more

home-assistant home-assistant 0.5.10

1 of the 3 container images this version deploys carry CVE-2026-32282.

Container image	Digest	Package	Fixed in
ghcr.io/home-assistant/home-assistant :2026.9.0	372d991e5888	stdlib@go1.25.6	1.25.9

Open the chart page →

2,344

hpe-cosi-driverhpe-storage

2.0.0

2 of 2 See more

hpe-cosi-driver hpe-storage 2.0.0

2 of the 2 container images this version deploys carry CVE-2026-32282.

Container image	Digest	Package	Fixed in
quay.io/hpestorage/cosi-driver :v2.0.0	a4d2667f2b6e	stdlib@go1.25.0	1.25.9
registry.k8s.io/sig-storage/objectstorage-sidecar :v0.2.2	c7166a73a303	stdlib@go1.24.11	1.25.9

Open the chart page →

1,696

frpc-ingressinfinity-server

0.4.1

1 of 1 See more

frpc-ingress infinity-server 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-32282.

Container image	Digest	Package	Fixed in
springhack/frpc_ingress :latest	4aceb821da88	stdlib@go1.19.5	1.25.9

Open the chart page →

2,623

infrahub-enterpriseinfrahub-enterprise

4.19.2

1 of 5 See more

infrahub-enterprise infrahub-enterprise 4.19.2

1 of the 5 container images this version deploys carry CVE-2026-32282.

Container image	Digest	Package	Fixed in
bitnamilegacy/redis :8.2.1-debian-12-r0	25bf63f3caf7	stdlib@go1.25.0	1.25.9

Open the chart page →

10,738

coreinstill-ai

0.1.75

11 of 15 See more

core instill-ai 0.1.75

11 of the 15 container images this version deploys carry CVE-2026-32282.

Container image	Digest	Package	Fixed in
groundnuty/k8s-wait-for :v2.0	c14d7271e401	stdlib@go1.19.3	1.25.9
instill/api-gateway :9bfdc88	b53eaa51c523	stdlib@go1.25.6	1.25.9
instill/artifact-backend :b28766a	c4a393e601ed	stdlib@go1.25.6	1.25.9
instill/console :0.68.5	4cd70e2df5c6	stdlib@go1.23.10	1.25.9
instill/mgmt-backend :d0933d4	ebe12f77a3f9	stdlib@go1.25.6	1.25.9
instill/model-backend :611f0f2	e980125e5ba5	stdlib@go1.25.6	1.25.9
library/influxdb :2.3.0-alpine	d7f5dd5f70e2	stdlib@go1.18.3	1.25.9
library/postgres :15-alpine	fe0737ba566a	stdlib@go1.24.6	1.25.9
library/registry :2.8.3	a3d8aaa63ed8	stdlib@go1.20.8	1.25.9
openfga/openfga :v1.9.2	5e94966c11df	stdlib@go1.24.5	1.25.9
temporalio/admin-tools :1.28	cfde8170c92f	stdlib@go1.25.8	1.25.9

Open the chart page →

31,447

intel-gpu-resource-driverintel

0.7.0

1 of 1 See more

intel-gpu-resource-driver intel 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-32282.

Container image	Digest	Package	Fixed in
intel/intel-gpu-resource-driver :v0.7.0	e158711e32ce	stdlib@go1.23.4	1.25.9

Open the chart page →

565

jenkins-operatorjenkins

0.8.1

1 of 1 See more

jenkins-operator jenkins 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-32282.

Container image	Digest	Package	Fixed in
quay.io/jenkins-kubernetes-operator/operator :v0.8.1	71cb50263c3b	stdlib@go1.15.6	1.25.9

Open the chart page →

2,211

calibre-webk8s-home-lab-repo

9.1.1

1 of 1 See more

calibre-web k8s-home-lab-repo 9.1.1

1 of the 1 container images this version deploys carry CVE-2026-32282.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/calibre-web :0.6.26	7c0464228f2f	stdlib@go1.17.8	1.25.9

Open the chart page →

4,577

home-assistantk8s-home-lab-repo

16.3.1

1 of 1 See more

home-assistant k8s-home-lab-repo 16.3.1

1 of the 1 container images this version deploys carry CVE-2026-32282.

Container image	Digest	Package	Fixed in
ghcr.io/home-operations/home-assistant :2026.3.1	067e54e2e107	stdlib@go1.25.6	1.25.9

Open the chart page →

4,671

wireguardk8s-home-lab-repo

1.6.0

1 of 1 See more

wireguard k8s-home-lab-repo 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-32282.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-home-lab/wireguard :v1.0.20210914	779858b5e11d	stdlib@go1.18.5	1.25.9

Open the chart page →

7,511

k8s-sftp-gcsk8s-sftp-gcs

0.1.4

1 of 1 See more

k8s-sftp-gcs k8s-sftp-gcs 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-32282.

Container image	Digest	Package	Fixed in
danuk/k8s-sftp-gcs :latest	dd0e6585c44f	stdlib@go1.18.4	1.25.9

Open the chart page →

1,607

k8statusk8status

0.17.0

1 of 1 See more

k8status k8status 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-32282.

Container image	Digest	Package	Fixed in
ghcr.io/stenic/k8status :0.17.0	93298e03089e	stdlib@go1.23.12	1.25.9

Open the chart page →

712

kanister-operatorkanister

0.118.0

1 of 1 See more

kanister-operator kanister 0.118.0

1 of the 1 container images this version deploys carry CVE-2026-32282.

Container image	Digest	Package	Fixed in
ghcr.io/kanisterio/controller :0.118.0	d22616a5998b	stdlib@go1.25.6	1.25.9

Open the chart page →

1,188

kiali-operatorkiali

2.32.0

1 of 1 See more

kiali-operator kiali 2.32.0

1 of the 1 container images this version deploys carry CVE-2026-32282.

Container image	Digest	Package	Fixed in
quay.io/kiali/kiali-operator :v2.32.0	96c5264d54ab	stdlib@go1.23.4	1.25.9

Open the chart page →

1,109

mysqldumpkokuwa

7.0.3

1 of 1 See more

mysqldump kokuwa 7.0.3

1 of the 1 container images this version deploys carry CVE-2026-32282.

Container image	Digest	Package	Fixed in
ghcr.io/kokuwaio/gcloud-mysql :v3.2.19	63098135c550	stdlib@go1.26.1	1.25.9

Open the chart page →

847

kraken-cikraken-ci

1.7.36

2 of 10 See more

kraken-ci kraken-ci 1.7.36

2 of the 10 container images this version deploys carry CVE-2026-32282.

Container image	Digest	Package	Fixed in
library/postgres :11	5d2aa4a7b5f9	stdlib@go1.16.7	1.25.9
minio/minio :RELEASE.2022-10-24T18-35-07Z	f9576903f19d	stdlib@go1.19.2	1.25.9

Open the chart page →

7,355

kubebadgeskubebadges

0.1.3

1 of 2 See more

kubebadges kubebadges 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-32282.

Container image	Digest	Package	Fixed in
neosu/kubebadges :v0.0.5	256530d8e5c6	stdlib@go1.21.3	1.25.9

Open the chart page →

1,801

pyroscopekubeblocks

0.2.92

1 of 1 See more

pyroscope kubeblocks 0.2.92

1 of the 1 container images this version deploys carry CVE-2026-32282.

Container image	Digest	Package	Fixed in
apecloud/pyroscope :0.37.2	dbca95a15bc1	stdlib@go1.19.6	1.25.9

Open the chart page →

1,620

Container images carrying it

4,396 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/wolveix/satisfactory-server :v1.9.10	e0f2f8c97598	stdlib@go1.18.1	1.25.9	1
ghcr.io/woodenmaiden/relfinderreformedfront :latest	344f53763b25	stdlib@go1.21.9	1.25.9	1
ghcr.io/wundergraph/cosmo/controlplane :0.133.1	49800ff775f3	stdlib@go1.22.3	1.25.9	1
ghcr.io/wundergraph/cosmo/graphqlmetrics :0.33.0	efb69ec3330c	stdlib@go1.23.6	1.25.9	1
ghcr.io/wundergraph/cosmo/otelcollector :0.18.1	5a6fe78d4d15	stdlib@go1.23.6	1.25.9	1
ghcr.io/wundergraph/cosmo/router :0.243.0	5afcab98d9d7	stdlib@go1.23.12	1.25.9	1
ghcr.io/wundergraph/cosmo/studio :0.111.0	454f4384713a	stdlib@go1.20.7	1.25.9	1
ghcr.io/wyrihaximusnet/kubernetes-redis-db-assignment-operator :v1.0.8	31060be60bec	stdlib@go1.16.15	1.25.9	1
ghcr.io/yasn77/pgbouncer :v0.0.6	cc8c13550e44	stdlib@go1.18.6	1.25.9	1
ghcr.io/yeonghoo2/crashloop-operator :0.0.6	565d1115e6bd	stdlib@go1.24.9	1.25.9	1
ghcr.io/zalando/postgres-operator :v1.14.0	4f40cfc2283b	stdlib@go1.23.4	1.25.9	1
ghcr.io/zalando/postgres-operator :v1.12.2	d81cda253f5c	stdlib@go1.22.3	1.25.9	1
ghcr.io/zcube/bitnami-compat/redis :7.0-debian-11-r55	118a403046f7	stdlib@go1.19.4	1.25.9	1
ghcr.io/zeiss/natz-operator/account-server :0.9.5	b380b5f17c3f	stdlib@go1.23.3	1.25.9	1
ghcr.io/zeiss/natz-operator/operator :0.9.5	187007974540	stdlib@go1.23.3	1.25.9	1
ghcr.io/zeiss/typhoon/controller :0.2.3	4fdf4edfda45	stdlib@go1.24.0	1.25.9	1
ghcr.io/zeiss/typhoon/typhoon-webhook :0.2.3	78f9b82050bc	stdlib@go1.24.0	1.25.9	1
ghcr.io/zokeber/velero-notifications :0.0.17	6d84f6c4ce20	stdlib@go1.25.8	1.25.9	1
ghcr.io/zoriya/kyoo_transcoder :4.7.1	2dadea51a91e	stdlib@go1.23.4	1.25.9	1
ghcr.io/zufardhiyaulhaq/frp-operator :v0.11.0	cd25ee354df2	stdlib@go1.23.12	1.25.9	1
mcr.microsoft.com/aks/kaito/gpu-provisioner :0.2.0	1204a7e948e9	stdlib@go1.21.8	1.25.9	1
mcr.microsoft.com/azure-application-gateway/kubernetes-ingress :1.6.0	bccaa701e2df	stdlib@go1.17.3	1.25.9	1
mcr.microsoft.com/k8s/csi/azuredisk-csi :v1.1.1	ec1803037ed9	stdlib@go1.15.4	1.25.9	1
mcr.microsoft.com/mssql/server :latest	4bab24f36c1e	stdlib@go1.26.1	1.25.9	1
mcr.microsoft.com/mssql/server :2022-latest	ba4c8329f48f	stdlib@go1.26.1	1.25.9	1
mcr.microsoft.com/mssql/server :2025-CU5-ubuntu-24.04	cee0f4db03b5	stdlib@go1.23.1	1.25.9	1
mcr.microsoft.com/oss/azure/aad-pod-identity/mic :v1.8.17	3004b93fcb74	stdlib@go1.19.10	1.25.9	1
mcr.microsoft.com/oss/azure/aad-pod-identity/nmi :v1.8.17	77788bf38938	stdlib@go1.19.10	1.25.9	1
mcr.microsoft.com/oss/kubernetes-csi/csi-attacher :v2.2.0	f55f30876129	stdlib@go1.14	1.25.9	1
mcr.microsoft.com/oss/kubernetes-csi/csi-node-driver-registrar :v2.0.1	fc5d14e9f26f	stdlib@go1.15	1.25.9	1
mcr.microsoft.com/oss/kubernetes-csi/csi-provisioner :v1.6.1	667b1b1ea1e4	stdlib@go1.15.2	1.25.9	1
mcr.microsoft.com/oss/kubernetes-csi/csi-resizer :v1.1.0	7997e0f236bc	stdlib@go1.15.2	1.25.9	1
mcr.microsoft.com/oss/kubernetes-csi/livenessprobe :v2.2.0	b7d82802cca8	stdlib@go1.15.6	1.25.9	1
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-provisioner :v5.2.0	afdfa3da79df	stdlib@go1.25.5	1.25.9	1
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-resizer :v1.13.2	fa8eba9843ff	stdlib@go1.25.7	1.25.9	1
mcr.microsoft.com/oss/v2/kubernetes-csi/livenessprobe :v2.15.0	59b9d0348428	stdlib@go1.25.7	1.25.9	1
public.ecr.aws/aktosecurity/akto-agent-guard-service :latest	5c6ff17c5849	stdlib@go1.25.5	1.25.9	1
public.ecr.aws/aktosecurity/confluentinc-cp-kafka :8.1.0-1-ubi9	9026dbbf280d	stdlib@go1.24.6	1.25.9	1
public.ecr.aws/aktosecurity/keelhq-keel :akto_v1.0.0	1eb61443d68e	stdlib@go1.23.4	1.25.9	1
public.ecr.aws/aws-containers/retail-store-sample-catalog :1.3.0	b654b266fa32	stdlib@go1.24.6	1.25.9	1
public.ecr.aws/aws-ec2/amazon-ec2-metadata-mock :v1.11.2	dd02d3569da0	stdlib@go1.17.13	1.25.9	1
public.ecr.aws/aws-ec2/aws-node-termination-handler :v1.19.0	844478ebd5b8	stdlib@go1.19.5	1.25.9	1
public.ecr.aws/aws-ec2/aws-node-termination-handler :v1.25.6	9ad31fb4e5be	stdlib@go1.25.8	1.25.9	1
public.ecr.aws/aws-ec2/aws-node-termination-handler-2/controller :v2.0.0-beta	9637c80dd23f	stdlib@go1.19.3	1.25.9	1
public.ecr.aws/aws-ec2/aws-node-termination-handler-2/webhook :v2.0.0-beta	86b0f7243250	stdlib@go1.19.3	1.25.9	1
public.ecr.aws/aws-observability/aws-for-fluent-bit :3.2.1	a480a1241720	stdlib@go1.25.6	1.25.9	1
public.ecr.aws/aws-observability/aws-otel-collector :v0.43.3	8aa9ea5f67b8	stdlib@go1.24.3	1.25.9	1
public.ecr.aws/aws-observability/aws-sigv4-proxy-admission-controller :1.0	67b89ae52240	stdlib@go1.15.3	1.25.9	1
public.ecr.aws/aws-secrets-manager/secrets-store-csi-driver-provider-aws :1.0.r2-2021.08.13.20.34-linux-amd64	02aed3370fce	stdlib@go1.15.12	1.25.9	1
public.ecr.aws/aws-secrets-manager/secrets-store-csi-driver-provider-aws :1.0.r2-35-g41dc61e-2022.12.16.20.38	363bd65cd707	stdlib@go1.18.8	1.25.9	1