StackRadar

CVE-2026-32285

High

Advisory

Published 16 Mar 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.007
53rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
179
of 17,781 indexed, latest versions
Container images
153
deployed by those charts
Fix available
1 of 1
affected package

github.com/buger/jsonparser has a denial of service vulnerability

Carried by container images the latest versions of 179 of 17,781 indexed charts deploy, on 153 images.

Affected packageAffected versionsFixed inImages
github.com/buger/jsonparsergolangv0.0.0-20191004114745-ee4c978eae7e, v1.1.11.1.2153
OSV records
GHSA-6g7g-w4f8-9c9x
Also known as
GO-2026-4514

Charts affected

179 by stars
ChartLatestAffected imagesRadar Score
plane-enterprisemakeplaneOfficialVerified publisher3.7.11 of 13See more

plane-enterprise makeplane 3.7.1

1 of the 13 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2025-09-07T16-13-09Z14cea493d9a3
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

4,942
clowder2ncsaVerified publisher1.9.71 of 12See more

clowder2 ncsa 1.9.7

1 of the 12 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2023.12.230b60b6565ab2
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

37,373
opikopikOfficialVerified publisher2.2.591 of 13See more

opik opik 2.2.59

1 of the 13 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
cloudpirates/image-minio:RELEASE.2025-10-15T17-29-55Z-hardened8dc02a7e5093
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

14,334
reportportalreportportal-ioOfficialVerified publisher26.8.121 of 15See more

reportportal reportportal-io 26.8.12

1 of the 15 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2025.7.23-debian-12-r08935e75fa5d1
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

11,869
grafanaromanow-helm-chartsVerified publisher1.7.11 of 1See more

grafana romanow-helm-charts 1.7.1

1 of the 1 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
grafana/grafana:8.3.4cf81d2c753c8
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

2,835
smallest-self-hostsmallest-self-hostVerified publisher0.2.21 of 12See more

smallest-self-host smallest-self-host 0.2.2

1 of the 12 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
grafana/grafana:11.0.00dc5a246ab16
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

7,685
sp-otel-collectorsp-otel-collectorVerified publisher1.1.61 of 1See more

sp-otel-collector sp-otel-collector 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
quay.io/geored/spmm-collector-contrib:1.0.063baf86a49ac
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

2,022
stornxstornxVerified publisher1.1.11 of 9See more

stornx stornx 1.1.1

1 of the 9 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v3.10.07571a304e67f
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

11,574
wraftwraft0.1.121 of 9See more

wraft wraft 0.1.12

1 of the 9 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2023-07-21T21-12-44Z8e5e9490cd50
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

10,090
backendzymtraceOfficialVerified publisher26.9.11 of 6See more

backend zymtrace 26.9.1

1 of the 6 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

10,323
airbyteairbyte-v2Verified publisher2.2.01 of 10See more

airbyte airbyte-v2 2.2.0

1 of the 10 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2023-11-20T22-40-07Zb833a1699b4f
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

12,473
ddosifyanteonVerified publisher1.7.51 of 13See more

ddosify anteon 1.7.5

1 of the 13 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
library/influxdb:2.6.1-alpine44a366dd7724
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

25,669
minioappscodeVerified publisher2026.9.111 of 1See more

minio appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2023-01-12T02-06-16Zfc6bedc99355
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

4,043
arlas-aiasarlas-stackVerified publisher28.8.02 of 22See more

arlas-aias arlas-stack 28.8.0

2 of the 22 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2024.12.18-debian-12-r1c0ede65eb88e
github.com/buger/jsonparser@v1.1.1
1.1.2
bitnamilegacy/minio:2025.4.22-debian-12-r1d7cd0e172c4c
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

40,238
assemblylineassemblylineVerified publisher7.4.171 of 12See more

assemblyline assemblyline 7.4.17

1 of the 12 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2024-01-11T07-46-16Z796f75ea413b
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

12,898
semantic-repositoryassist-iot-semantic-repository1.1.01 of 3See more

semantic-repository assist-iot-semantic-repository 1.1.0

1 of the 3 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
minio/minio:latest14cea493d9a3
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

1,069
ragflowbaboulinet0.1.11 of 5See more

ragflow baboulinet 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2023-12-20T01-00-02Z5702ea361420
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

5,823
grafanabook-k8sinfra-v28.8.21 of 1See more

grafana book-k8sinfra-v2 8.8.2

1 of the 1 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
grafana/grafana:11.4.0d8ea37798ccc
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

1,800
kube-prometheus-stackbook-k8sinfra-v265.5.11 of 6See more

kube-prometheus-stack book-k8sinfra-v2 65.5.1

1 of the 6 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
grafana/grafana:11.2.2-security-01464eac539793
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

6,036
miniobysamioVerified publisher1.0.31 of 1See more

minio bysamio 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2025-09-07T16-13-09Z14cea493d9a3
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

1,069
temporalcastaiVerified publisher0.54.21 of 14See more

temporal castai 0.54.2

1 of the 14 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
grafana/grafana:11.0.00dc5a246ab16
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

16,198
pathling-serverchglVerified publisher0.10.111 of 3See more

pathling-server chgl 0.10.11

1 of the 3 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
cloudpirates/image-minio:RELEASE.2025-10-15T17-29-55Z-hardened8dc02a7e5093
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

961
cloudpremcloudprem0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad1 of 6See more

cloudprem cloudprem 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

1 of the 6 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
ghcr.io/formancehq/membership:v1.11.024a0113d5fb0
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

18,293
monitoringcluster-deploy0.3.03 of 11See more

monitoring cluster-deploy 0.3.0

3 of the 11 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
grafana/grafana:12.4.1e932bd6ed0e0
github.com/buger/jsonparser@v1.1.1
1.1.2
grafana/loki:3.6.73c8fd3570dd9
github.com/buger/jsonparser@v1.1.1
1.1.2
quay.io/prometheus/prometheus:v3.10.07571a304e67f
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

8,183
kubernetes-mcpcowboysysopVerified publisher2.0.01 of 1See more

kubernetes-mcp cowboysysop 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
quay.io/manusa/kubernetes_mcp_server:v0.0.47150f76e844d9
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

1,797
csghubcsghubVerified publisher2.4.32 of 34See more

csghub csghub 2.4.3

2 of the 34 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
grafana/loki:3.4.258a6c186ce78
github.com/buger/jsonparser@v1.1.1
1.1.2
minio/minio:RELEASE.2025-09-07T16-13-09Z14cea493d9a3
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

58,897
miniod4nVerified publisher5.2.11 of 2See more

minio d4n 5.2.1

1 of the 2 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2024-06-04T19-20-08Zc6b68f158628
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

2,629
dapr-agentsdapr-agents-devVerified publisher0.1.55 of 31See more

dapr-agents dapr-agents-dev 0.1.5

5 of the 31 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
grafana/grafana:12.3.39e1e77ade304
github.com/buger/jsonparser@v1.1.1
1.1.2
grafana/loki:3.6.5847c287ada0e
github.com/buger/jsonparser@v1.1.1
1.1.2
grafana/tempo:2.9.065a578975943
github.com/buger/jsonparser@v1.1.1
1.1.2
otel/opentelemetry-collector-contrib:0.145.0a7343f018690
github.com/buger/jsonparser@v1.1.1
1.1.2
ghcr.io/kagent-dev/kagent/tools:0.0.13c8882543f693
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

22,193
dnation-kubernetes-monitoring-stackdnationcloud4.0.22 of 17See more

dnation-kubernetes-monitoring-stack dnationcloud 4.0.2

2 of the 17 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
grafana/loki:3.2.0882e30c20683
github.com/buger/jsonparser@v1.1.1
1.1.2
quay.io/minio/minio:RELEASE.2022-10-24T18-35-07Zd853057f2800
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

21,641
kube-ecp-stackemqx-operator2.5.11 of 16See more

kube-ecp-stack emqx-operator 2.5.1

1 of the 16 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
emqxecp/otelcol:2.5.04c31d9bec846
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

23,685
express-ts-app-helm-chartsexpress-ts-app-helm-chartsVerified publisher1.0.02 of 4See more

express-ts-app-helm-charts express-ts-app-helm-charts 1.0.0

2 of the 4 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
grafana/loki:2.9.66ca6e2cd3b6f
github.com/buger/jsonparser@v1.1.1
1.1.2
grafana/loki-canary:2.9.6549a40203e97
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

5,748
datadog-apmfairwinds-incubator2.0.01 of 1See more

datadog-apm fairwinds-incubator 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
public.ecr.aws/datadog/agent:7.73.0f4925b15ce94
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

2,785
farm-observabilityfarm-observabilityOfficialVerified publisher0.27.23 of 18See more

farm-observability farm-observability 0.27.2

3 of the 18 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
grafana/alloy:v1.12.2f94b1c82957a
github.com/buger/jsonparser@v1.1.1
1.1.2
grafana/loki:3.6.73c8fd3570dd9
github.com/buger/jsonparser@v1.1.1
1.1.2
grafana/tempo:2.9.065a578975943
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

13,255
ledgerformance1.2.01 of 1See more

ledger formance 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
ghcr.io/formancehq/ledger:v1.9.203c1ddbda33b
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

4,602
castsponsorskipgabe565Verified publisher0.8.11 of 1See more

castsponsorskip gabe565 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
ghcr.io/gabe565/castsponsorskip:0.8.15f7b4c6dd299
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

1,229
galoy-depsgaloymoney0.10.201 of 9See more

galoy-deps galoymoney 0.10.20

1 of the 9 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

11,961
monitoringgaloymoney0.12.211 of 6See more

monitoring galoymoney 0.12.21

1 of the 6 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
grafana/grafana:11.3.0a0f881232a6f
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

5,295
galoy-depsgaloymoney20.10.201 of 9See more

galoy-deps galoymoney2 0.10.20

1 of the 9 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

11,961
monitoringgaloymoney20.12.211 of 6See more

monitoring galoymoney2 0.12.21

1 of the 6 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
grafana/grafana:11.3.0a0f881232a6f
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

5,295
glassflow-etlglassflowVerified publisher0.5.211 of 16See more

glassflow-etl glassflow 0.5.21

1 of the 16 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.108.0923eb1cfae32
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

12,056
gnp-stackgnp-stack0.0.51 of 14See more

gnp-stack gnp-stack 0.0.5

1 of the 14 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
grafana/grafana:12.2.135c41e0fd029
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

7,659
opentelemetry-demogpg-dev0.33.82 of 27See more

opentelemetry-demo gpg-dev 0.33.8

2 of the 27 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
grafana/grafana:11.3.1fa801ab6e1ae
github.com/buger/jsonparser@v1.1.1
1.1.2
otel/opentelemetry-collector-contrib:0.114.037fa87091cfa
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

49,025
prometheusgpg-dev29.2.11 of 6See more

prometheus gpg-dev 29.2.1

1 of the 6 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v3.11.2cd37346c9745
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

3,261
grafana-samplinggrafana1.1.71 of 2See more

grafana-sampling grafana 1.1.7

1 of the 2 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
grafana/alloy:v1.11.38c7256f412fe
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

3,318
pyroscope-monitoringgrafana0.1.11 of 6See more

pyroscope-monitoring grafana 0.1.1

1 of the 6 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
grafana/otel-lgtm:0.11.1009d8c3ce4f3a
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

8,188
loki-proxygroundcover0.1.11 of 1See more

loki-proxy groundcover 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
public.ecr.aws/groundcovercom/loki-proxy:0.1.1783d550ad813
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

2,175
logging-stackhelm-charts-alexis-carbillet0.1.04 of 9See more

logging-stack helm-charts-alexis-carbillet 0.1.0

4 of the 9 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
grafana/grafana:11.1.0079600c9517b
github.com/buger/jsonparser@v1.1.1
1.1.2
grafana/loki:2.6.11ee60f980950
github.com/buger/jsonparser@v1.1.1
1.1.2
grafana/loki:2.8.2b1da1d23037e
github.com/buger/jsonparser@v1.1.1
1.1.2
grafana/loki-canary:2.6.1ab2a2569307b
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

12,650
monitoring-stackhelm-charts-alexis-carbillet0.1.01 of 11See more

monitoring-stack helm-charts-alexis-carbillet 0.1.0

1 of the 11 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
grafana/grafana:11.3.0a0f881232a6f
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

9,460
answerhelmforgeVerified publisher1.5.21 of 1See more

answer helmforge 1.5.2

1 of the 1 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
apache/answer:2.0.2a0d71b0e30a5
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

556
openbashelm-openbasVerified publisher1.8.141 of 7See more

openbas helm-openbas 1.8.14

1 of the 7 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

25,017

Container images carrying it

153 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/minio/minio:RELEASE.2022-10-24T18-35-07Zd853057f2800
github.com/buger/jsonparser@v1.1.1
1.1.2
1
quay.io/prometheus/prometheus:v3.11.3c0b857aead0d
github.com/buger/jsonparser@v1.1.1
1.1.2
1
quay.io/prometheus/prometheus:v3.11.2cd37346c9745
github.com/buger/jsonparser@v1.1.1
1.1.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.