StackRadar

CVE-2026-32285

High

Advisory

Published 16 Mar 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.007
53rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
179
of 17,781 indexed, latest versions
Container images
153
deployed by those charts
Fix available
1 of 1
affected package

github.com/buger/jsonparser has a denial of service vulnerability

Carried by container images the latest versions of 179 of 17,781 indexed charts deploy, on 153 images.

Affected packageAffected versionsFixed inImages
github.com/buger/jsonparsergolangv0.0.0-20191004114745-ee4c978eae7e, v1.1.11.1.2153
OSV records
GHSA-6g7g-w4f8-9c9x
Also known as
GO-2026-4514

Charts affected

179 by stars
ChartLatestAffected imagesRadar Score
opentelemetry-collectorsb-helm-charts0.3.01 of 1See more

opentelemetry-collector sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.96.07ef2a2ff46b9
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

1,721
temposb-helm-charts0.4.01 of 1See more

tempo sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
grafana/tempo:2.9.065a578975943
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

923
miniosergiotocaliniVerified publisher1.0.01 of 1See more

minio sergiotocalini 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2023-07-21T21-12-44Z8e5e9490cd50
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

4,203
ccx-monitoringseveralnines0.6.211 of 7See more

ccx-monitoring severalnines 0.6.21

1 of the 7 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
grafana/grafana:12.3.12175aaa91c96
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

7,708
mongosyncsinextraVerified publisher0.4.01 of 1See more

mongosync sinextra 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/mongosync:1.15.0fa99ed475f03
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

2,815
network-observerskupper-network-observerVerified publisher2.2.21 of 3See more

network-observer skupper-network-observer 2.2.2

1 of the 3 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v3.11.3c0b857aead0d
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

601
mimirskyloud-helm-chartsVerified publisher5.5.11 of 5See more

mimir skyloud-helm-charts 5.5.1

1 of the 5 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2023-09-30T07-02-29Z6262bc9a2730
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

10,651
cost-analyzersoftonic2.5.51 of 6See more

cost-analyzer softonic 2.5.5

1 of the 6 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
grafana/grafana:11.5.28b37a2f028f1
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

7,901
kube-prometheus-stacksoftonic81.5.11 of 6See more

kube-prometheus-stack softonic 81.5.1

1 of the 6 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
grafana/grafana:12.3.2ba93c9d192e5
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

4,974
datadogspartan0.1.01 of 1See more

datadog spartan 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
gcr.io/datadoghq/cluster-agent:7.61.06efe04ba4e06
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

3,232
servicexssl-hep1.8.51 of 16See more

servicex ssl-hep 1.8.5

1 of the 16 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2022.12.12-debian-11-r90f7c8ac484ac
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

66,266
agentssynapse0.1.301 of 9See more

agents synapse 0.1.30

1 of the 9 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
ghcr.io/synapsecns/sanguine/omnirpc:latest5217e3d1fc70
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

7,244
explorersynapse0.2.161 of 6See more

explorer synapse 0.2.16

1 of the 6 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
ghcr.io/synapsecns/sanguine/omnirpc:latest5217e3d1fc70
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

8,518
omnirpcsynapse0.2.921 of 2See more

omnirpc synapse 0.2.92

1 of the 2 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
ghcr.io/synapsecns/sanguine/omnirpc:latest5217e3d1fc70
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

1,121
scribesynapse0.2.161 of 7See more

scribe synapse 0.2.16

1 of the 7 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
ghcr.io/synapsecns/sanguine/omnirpc:latest5217e3d1fc70
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

2,680
the0the0Verified publisher0.9.81 of 9See more

the0 the0 0.9.8

1 of the 9 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
minio/minio:latest14cea493d9a3
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

7,248
monitoringthl-chartsVerified publisher0.1.13 of 10See more

monitoring thl-charts 0.1.1

3 of the 10 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
grafana/grafana:8.5.042d3e6bc1865
github.com/buger/jsonparser@v1.1.1
1.1.2
grafana/loki:2.5.0f9ef133793af
github.com/buger/jsonparser@v1.1.1
1.1.2
grafana/promtail:2.4.2626900031c4e
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

18,908
tfy-lokitruefoundryVerified publisher0.1.62 of 2See more

tfy-loki truefoundry 0.1.6

2 of the 2 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
grafana/loki:2.9.1035b02acc6765
github.com/buger/jsonparser@v1.1.1
1.1.2
grafana/promtail:2.9.1063a2e57a5b14
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

2,813
truefoundry-monitoringtruefoundryVerified publisher0.1.61 of 8See more

truefoundry-monitoring truefoundry 0.1.6

1 of the 8 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
grafana/grafana:12.3.070d9599b186c
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

4,526
miniouninettsigma21.2.01 of 1See more

minio uninettsigma2 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
sigma2as/minio:20240306-3a2e4f5c284ead9ec3e
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

4,960
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
minio/minio:latest14cea493d9a3
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

45,239
scrutinyvhdirkVerified publisher0.1.31 of 1See more

scrutiny vhdirk 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
ghcr.io/analogj/scrutiny:master-omnibus18689773150d
github.com/buger/jsonparser@v0.0.0-20191004114745-ee4c978eae7e
1.1.2

Open the chart page →

4,382
aih-scannerwallarmVerified publisher2.7.111 of 2See more

aih-scanner wallarm 2.7.11

1 of the 2 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
wallarm/aih-scanner:2.7.11f1cb26db1f5b
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

3,911
wallarm-node-nextwallarmVerified publisher0.5.32 of 2See more

wallarm-node-next wallarm 0.5.3

2 of the 2 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
wallarm/node-helpers:5.0.2-1097cadc42336
github.com/buger/jsonparser@v1.1.1
1.1.2
wallarm/node-next:0.5.24314f3d2b918
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

2,408
wallarm-oobwallarmVerified publisher0.23.02 of 3See more

wallarm-oob wallarm 0.23.0

2 of the 3 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
wallarm/node-helpers:6.10.1aecd88b24c51
github.com/buger/jsonparser@v1.1.1
1.1.2
wallarm/node-native-processing:0.23.07db2da8fce0b
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

2,824
minio-standalonewenerme1.0.21 of 1See more

minio-standalone wenerme 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2022-01-04T07-41-07Z1484c87239ea
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

6,138
wexa-studiowexa-studio1.2.01 of 15See more

wexa-studio wexa-studio 1.2.0

1 of the 15 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2024-01-16T16-07-38Z4c4a4876193f
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

14,983
opentelemetry-collectorwikimedia0.62.71 of 1See more

opentelemetry-collector wikimedia 0.62.7

1 of the 1 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.81.0c6671841470b
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

2,022
ygdrassil-monitoringygdrassilVerified publisher0.4.01 of 10See more

ygdrassil-monitoring ygdrassil 0.4.0

1 of the 10 container images this version deploys carry CVE-2026-32285.

Container imageDigestPackageFixed in
grafana/grafana:11.5.15781759b3d27
github.com/buger/jsonparser@v1.1.1
1.1.2

Open the chart page →

9,381

Container images carrying it

153 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/minio/minio:RELEASE.2022-10-24T18-35-07Zd853057f2800
github.com/buger/jsonparser@v1.1.1
1.1.2
1
quay.io/prometheus/prometheus:v3.11.3c0b857aead0d
github.com/buger/jsonparser@v1.1.1
1.1.2
1
quay.io/prometheus/prometheus:v3.11.2cd37346c9745
github.com/buger/jsonparser@v1.1.1
1.1.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.