CVE-2026-32285
HighAdvisory
Published 16 Mar 2026In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.007
- 53rd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 179
- of 17,781 indexed, latest versions
- Container images
- 153
- deployed by those charts
- Fix available
- 1 of 1
- affected package
github.com/buger/jsonparser has a denial of service vulnerability
Carried by container images the latest versions of 179 of 17,781 indexed charts deploy, on 153 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v0.0.0-20191004114745-ee4c978eae7e, v1.1.1 | 1.1.2 | 153 |
- OSV records
- GHSA-6g7g-w4f8-9c9x
- Also known as
- GO-2026-4514
Charts affected
179 by stars
Container images carrying it
153 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| minio/ | 6d770d7f255c | github.com/ | 1.1.2 | 1 |
| minio/ | b833a1699b4f | github.com/ | 1.1.2 | 1 |
| minio/ | d249d1fb6966 | github.com/ | 1.1.2 | 1 |
| minio/ | f9576903f19d | github.com/ | 1.1.2 | 1 |
| minio/ | fc6bedc99355 | github.com/ | 1.1.2 | 1 |
| otel/ | 37fa87091cfa | github.com/ | 1.1.2 | 1 |
| otel/ | 3bc07732530c | github.com/ | 1.1.2 | 1 |
| otel/ | 5ac3e0ba2b0b | github.com/ | 1.1.2 | 1 |
| otel/ | 71fcef33ae71 | github.com/ | 1.1.2 | 1 |
| otel/ | 923eb1cfae32 | github.com/ | 1.1.2 | 1 |
| otel/ | 995f17004231 | github.com/ | 1.1.2 | 1 |
| otel/ | a7343f018690 | github.com/ | 1.1.2 | 1 |
| otel/ | c6671841470b | github.com/ | 1.1.2 | 1 |
| otel/ | faf125d656fa | github.com/ | 1.1.2 | 1 |
| sarwansharma/ | 59d1da9385d1 | github.com/ | 1.1.2 | 1 |
| semitechnologies/ | 7a00d226f063 | github.com/ | 1.1.2 | 1 |
| sigma2as/ | c284ead9ec3e | github.com/ | 1.1.2 | 1 |
| uptrace/ | 34a02c3b2d12 | github.com/ | 1.1.2 | 1 |
| wallarm/ | f1cb26db1f5b | github.com/ | 1.1.2 | 1 |
| wallarm/ | 097cadc42336 | github.com/ | 1.1.2 | 1 |
| wallarm/ | aecd88b24c51 | github.com/ | 1.1.2 | 1 |
| wallarm/ | 7db2da8fce0b | github.com/ | 1.1.2 | 1 |
| wallarm/ | 4314f3d2b918 | github.com/ | 1.1.2 | 1 |
| gcr.io/ | 6efe04ba4e06 | github.com/ | 1.1.2 | 1 |
| ghcr.io/ | 18689773150d | github.com/ | 1.1.2 | 1 |
| ghcr.io/ | fce5b6fd161c | github.com/ | 1.1.2 | 1 |
| ghcr.io/ | 9853bb613cd0 | github.com/ | 1.1.2 | 1 |
| ghcr.io/ | 69b55a1c1c5d | github.com/ | 1.1.2 | 1 |
| ghcr.io/ | 03c1ddbda33b | github.com/ | 1.1.2 | 1 |
| ghcr.io/ | 24a0113d5fb0 | github.com/ | 1.1.2 | 1 |
| ghcr.io/ | 5f7b4c6dd299 | github.com/ | 1.1.2 | 1 |
| ghcr.io/ | 50b431281d3e | github.com/ | 1.1.2 | 1 |
| ghcr.io/ | c8882543f693 | github.com/ | 1.1.2 | 1 |
| ghcr.io/ | fa6dba122171 | github.com/ | 1.1.2 | 1 |
| ghcr.io/ | f65f6810ea23 | github.com/ | 1.1.2 | 1 |
| ghcr.io/ | c379e66246be | github.com/ | 1.1.2 | 1 |
| ghcr.io/ | 2434560e8f0e | github.com/ | 1.1.2 | 1 |
| ghcr.io/ | c79b2e64a211 | github.com/ | 1.1.2 | 1 |
| ghcr.io/ | fa99ed475f03 | github.com/ | 1.1.2 | 1 |
| ghcr.io/ | 5afcab98d9d7 | github.com/ | 1.1.2 | 1 |
| public.ecr.aws/ | f4925b15ce94 | github.com/ | 1.1.2 | 1 |
| public.ecr.aws/ | 783d550ad813 | github.com/ | 1.1.2 | 1 |
| public.ecr.aws/ | 08c90bd040bf | github.com/ | 1.1.2 | 1 |
| quay.io/ | 63baf86a49ac | github.com/ | 1.1.2 | 1 |
| quay.io/ | b741efae8d31 | github.com/ | 1.1.2 | 1 |
| quay.io/ | 150f76e844d9 | github.com/ | 1.1.2 | 1 |
| quay.io/ | 5702ea361420 | github.com/ | 1.1.2 | 1 |
| quay.io/ | 796f75ea413b | github.com/ | 1.1.2 | 1 |
| quay.io/ | c3d20bc2ea08 | github.com/ | 1.1.2 | 1 |
| quay.io/ | c6b68f158628 | github.com/ | 1.1.2 | 1 |