CVE-2026-32288

Medium

Advisory

Published 7 Apr 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.5; base score, highest
EPSS: 0.003; 22nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 3,838; of 17,792 indexed, latest versions
Container images: 4,376; deployed by those charts
Fix available: 1 of 2; affected packages

Unbounded allocation for old GNU sparse in archive/tar

Carried by container images the latest versions of 3,838 of 17,792 indexed charts deploy, on 4,376 images.

Affected package	Affected versions	Fixed in	Images
golang-1.19deb	1.19.8-2	no fix listed	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+177 more	1.25.9	4,376

OSV records: DEBIAN-CVE-2026-32288 GO-2026-4869
Also known as: BIT-golang-2026-32288

Charts affected

3,838 by stars

Chart

Latest

Affected images

Radar Score

linode-blockstorage-csi-driverlinode-blockstorage-csi-driver

1.1.4

4 of 5 See more

linode-blockstorage-csi-driver linode-blockstorage-csi-driver 1.1.4

4 of the 5 container images this version deploys carry CVE-2026-32288.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-attacher :v4.11.0	b74b05b39501	stdlib@go1.25.7	1.25.9
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.16.0	ab482308a492	stdlib@go1.25.7	1.25.9
registry.k8s.io/sig-storage/csi-provisioner :v6.2.0	6be9f63ca4ca	stdlib@go1.25.7	1.25.9
registry.k8s.io/sig-storage/csi-resizer :v2.1.0	589e525cddef	stdlib@go1.25.7	1.25.9

Open the chart page →

2,967

school-botlinuxoid69

0.1.0

1 of 1 See more

school-bot linuxoid69 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-32288.

Container image	Digest	Package	Fixed in
ghcr.io/linuxoid69/school-bot :v0.3.3	c8872438f1e0	stdlib@go1.23.3	1.25.9

Open the chart page →

772

liqo-upgrade-operatorliqo-upgrade-operator

0.1.0

1 of 1 See more

liqo-upgrade-operator liqo-upgrade-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-32288.

Container image	Digest	Package	Fixed in
kazem26/liqo-upgrade-operator :v0.1	268b7c6a59dd	stdlib@go1.24.13	1.25.9

Open the chart page →

375

listmonklistmonk-chart

2.0.1

2 of 2 See more

listmonk listmonk-chart 2.0.1

2 of the 2 container images this version deploys carry CVE-2026-32288.

Container image	Digest	Package	Fixed in
library/postgres :15	9b1d34adbce1	stdlib@go1.24.6	1.25.9
listmonk/listmonk :v6.0.0	bf3903d54a46	stdlib@go1.24.1	1.25.9

Open the chart page →

3,091

ingresslivekit-server

1.2.2

1 of 1 See more

ingress livekit-server 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-32288.

Container image	Digest	Package	Fixed in
livekit/ingress :v1.2.2	1ab01641b366	stdlib@go1.20.7	1.25.9

Open the chart page →

10,780

livekit-recorderlivekit-server

0.3.13

1 of 1 See more

livekit-recorder livekit-server 0.3.13

1 of the 1 container images this version deploys carry CVE-2026-32288.

Container image	Digest	Package	Fixed in
livekit/livekit-recorder :v0.3.13	ecf1409c75e0	stdlib@go1.16.2	1.25.9

Open the chart page →

2,135

livekit-serverlivekit-server

1.9.0

1 of 1 See more

livekit-server livekit-server 1.9.0

1 of the 1 container images this version deploys carry CVE-2026-32288.

Container image	Digest	Package	Fixed in
livekit/livekit-server :v1.9.0	3602a85840d5	stdlib@go1.24.3	1.25.9

Open the chart page →

1,560

pagesliviu884422-pages

1.0.0

1 of 3 See more

pages liviu884422-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-32288.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.9

Open the chart page →

20,242

llmarinerllmariner

1.53.1

14 of 21 See more

llmariner llmariner 1.53.1

14 of the 21 container images this version deploys carry CVE-2026-32288.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/api-usage-cleaner :1.16.0	d47f43484055	stdlib@go1.23.12	1.25.9
public.ecr.aws/cloudnatix/llmariner/api-usage-server :1.16.0	8f9c32b866b0	stdlib@go1.23.12	1.25.9
public.ecr.aws/cloudnatix/llmariner/cluster-manager-server :1.8.0	364b3ff0fcb7	stdlib@go1.24.5	1.25.9
public.ecr.aws/cloudnatix/llmariner/cluster-monitor-server :0.10.2	2d28f9e3eab4	stdlib@go1.23.11	1.25.9
public.ecr.aws/cloudnatix/llmariner/database-creator :1.17.0	97065ced2942	stdlib@go1.23.11	1.25.9
public.ecr.aws/cloudnatix/llmariner/file-manager-server :1.11.0	301216788e93	stdlib@go1.23.11	1.25.9
public.ecr.aws/cloudnatix/llmariner/inference-manager-server :1.45.0	90b890f800ab	stdlib@go1.23.12	1.25.9
public.ecr.aws/cloudnatix/llmariner/job-manager-dispatcher :1.27.0	582508903cb0	stdlib@go1.23.12	1.25.9
public.ecr.aws/cloudnatix/llmariner/job-manager-server :1.27.0	fe9de719f91e	stdlib@go1.23.12	1.25.9
public.ecr.aws/cloudnatix/llmariner/model-manager-loader :1.27.0	26ac7263a823	stdlib@go1.24.0	1.25.9
public.ecr.aws/cloudnatix/llmariner/model-manager-server :1.27.0	c057dcdd9ef3	stdlib@go1.23.12	1.25.9
public.ecr.aws/cloudnatix/llmariner/rbac-server :1.19.1	df1adeb86679	stdlib@go1.23.12	1.25.9
public.ecr.aws/cloudnatix/llmariner/session-manager-server :1.9.0	f24ecd37fbaa	stdlib@go1.23.11	1.25.9
public.ecr.aws/cloudnatix/llmariner/user-manager-server :1.27.1	628a14449241	stdlib@go1.23.12	1.25.9

Open the chart page →

12,150

llm-dllm-d

1.0.23

1 of 2 See more

llm-d llm-d 1.0.23

1 of the 2 container images this version deploys carry CVE-2026-32288.

Container image	Digest	Package	Fixed in
ghcr.io/llm-d/llm-d-model-service :v0.0.15	8b99a8104a2f	stdlib@go1.24.3	1.25.9

Open the chart page →

2,539

home-assistantlmatfy

0.1.38

1 of 1 See more

home-assistant lmatfy 0.1.38

1 of the 1 container images this version deploys carry CVE-2026-32288.

Container image	Digest	Package	Fixed in
homeassistant/home-assistant :2026.7	5a531753cea9	stdlib@go1.25.6	1.25.9

Open the chart page →

2,450

go-ocpp-serverloafoe

0.2.1

1 of 1 See more

go-ocpp-server loafoe 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-32288.

Container image	Digest	Package	Fixed in
ghcr.io/loafoe/go-ocpp-server :v0.2.1	45bb960674ab	stdlib@go1.21.13	1.25.9

Open the chart page →

399

otlp-gatewayloafoe

0.0.2

2 of 2 See more

otlp-gateway loafoe 0.0.2

2 of the 2 container images this version deploys carry CVE-2026-32288.

Container image	Digest	Package	Fixed in
ghcr.io/jimmidyson/configmap-reload :v0.13.1	ca0c14eef541	stdlib@go1.22.4	1.25.9
ghcr.io/loafoe/caddy-token :v0.3.0	528f2174fa2f	stdlib@go1.22.5	1.25.9

Open the chart page →

2,162

patch-operatorloafoe

0.11.3

1 of 2 See more

patch-operator loafoe 0.11.3

1 of the 2 container images this version deploys carry CVE-2026-32288.

Container image	Digest	Package	Fixed in
quay.io/redhat-cop/kube-rbac-proxy :v0.11.0	c68135620167	stdlib@go1.15.15	1.25.9

Open the chart page →

4,911

solgateloafoe

0.0.12

1 of 1 See more

solgate loafoe 0.0.12

1 of the 1 container images this version deploys carry CVE-2026-32288.

Container image	Digest	Package	Fixed in
ghcr.io/loafoe/solgate :v0.0.12	b3256cbc7b68	stdlib@go1.21.0	1.25.9

Open the chart page →

2,108

tempo-distributedloafoe

1.20.1

1 of 2 See more

tempo-distributed loafoe 1.20.1

1 of the 2 container images this version deploys carry CVE-2026-32288.

Container image	Digest	Package	Fixed in
grafana/tempo :2.6.0	f55a8a1937ff	stdlib@go1.22.6	1.25.9

Open the chart page →

2,027

weather-app-chartlocal-weatherapp

0.1.0

2 of 4 See more

weather-app-chart local-weatherapp 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-32288.

Container image	Digest	Package	Fixed in
bitnamilegacy/mysql :8.0.36-debian-11-r3	8aad73aa0c6d	stdlib@go1.21.6	1.25.9
youssef11gaber10/deployment-auth-go :latest	6597b26959d2	stdlib@go1.26.1	1.25.9

Open the chart page →

5,905

ocatiecataloguslocatiecatalogus

1.0.0

1 of 3 See more

ocatiecatalogus locatiecatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-32288.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/ocatiecatalogus-php :latest	c22764cbfa97	stdlib@go1.13.10	1.25.9

Open the chart page →

7,519

locust-pluginslocust-plugins

0.0.4

2 of 3 See more

locust-plugins locust-plugins 0.0.4

2 of the 3 container images this version deploys carry CVE-2026-32288.

Container image	Digest	Package	Fixed in
sky5367/locust-plugins-grafana :latest	d51bf68d4b26	stdlib@go1.21.8	1.25.9
sky5367/locust-plugins-timescale :latest	d3150f201471	stdlib@go1.18.7	1.25.9

Open the chart page →

7,534

uptime-kumaloeken-at-home

2.3.2

1 of 1 See more

uptime-kuma loeken-at-home 2.3.2

1 of the 1 container images this version deploys carry CVE-2026-32288.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.3.2	9aeb4e51d038	stdlib@go1.20.5	1.25.9

Open the chart page →

33,540

central-hostpath-mapperloft

0.2.9

1 of 1 See more

central-hostpath-mapper loft 0.2.9

1 of the 1 container images this version deploys carry CVE-2026-32288.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/central-hostpath-mapper :0.2.9	fa6dba122171	stdlib@go1.23.2	1.25.9

Open the chart page →

924

devpod-proloft

0.0.0-ci.4-do-not-use

1 of 1 See more

devpod-pro loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2026-32288.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/devpod-pro :0.0.0-ci.4-do-not-use	5dfa86b6451f	stdlib@go1.20.10	1.25.9

Open the chart page →

3,234

devspace-cloudloft

0.3.3

2 of 8 See more

devspace-cloud loft 0.3.3

2 of the 8 container images this version deploys carry CVE-2026-32288.

Container image	Digest	Package	Fixed in
devspacecloud/manager :0.3.3	49c397413f7b	stdlib@go1.13.8	1.25.9
library/postgres :11	5d2aa4a7b5f9	stdlib@go1.16.7	1.25.9

Open the chart page →

9,888

kioskloft

0.2.11

1 of 1 See more

3,094

license-serverloft

0.6.0

1 of 1 See more

license-server loft 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-32288.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/license-server :0.6.0	69ce001bb4b0	stdlib@go1.24.3	1.25.9

Open the chart page →

804

loft-agentloft

3.2.4

1 of 1 See more

loft-agent loft 3.2.4

1 of the 1 container images this version deploys carry CVE-2026-32288.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/agent :3.2.4	5c109914ff73	stdlib@go1.18.10	1.25.9

Open the chart page →

2,453

loft-direct-cluster-endpointloft

1.14.0

1 of 1 See more

loft-direct-cluster-endpoint loft 1.14.0

1 of the 1 container images this version deploys carry CVE-2026-32288.

Container image	Digest	Package	Fixed in
loftsh/directclusterendpoint :1.14.0	310cc7d690f5	stdlib@go1.16.6	1.25.9

Open the chart page →

3,119

vcluster-control-planeloft

0.0.0-ci.4-do-not-use

1 of 1 See more

vcluster-control-plane loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2026-32288.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/vcluster-control-plane :0.0.0-ci.4-do-not-use	45e744fc623f	stdlib@go1.22.0	1.25.9

Open the chart page →

3,234

vcluster-headloft

0.0.0-035ec6e

1 of 2 See more

vcluster-head loft 0.0.0-035ec6e

1 of the 2 container images this version deploys carry CVE-2026-32288.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/kubernetes :v1.35.0	90097a08b87c	stdlib@go1.24.11	1.25.9

Open the chart page →

1,277

vcluster-hpmloft

0.2.7

1 of 1 See more

vcluster-hpm loft 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-32288.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/vcluster-hpm :0.2.7	f65f6810ea23	stdlib@go1.24.2	1.25.9

Open the chart page →

833

vcluster-proloft

0.0.0-ci-run.10

2 of 2 See more

vcluster-pro loft 0.0.0-ci-run.10

2 of the 2 container images this version deploys carry CVE-2026-32288.

Container image	Digest	Package	Fixed in
rancher/k3s :v1.26.0-k3s1	9380f5dbae9a	stdlib@go1.19.4	1.25.9
ghcr.io/loft-sh/vcluster-pro :0.0.0-ci-run.10	ab2e1fa19dd4	stdlib@go1.18.10	1.25.9

Open the chart page →

5,101

vcluster-pro-eksloft

0.0.0-ci-run.10

4 of 4 See more

vcluster-pro-eks loft 0.0.0-ci-run.10

4 of the 4 container images this version deploys carry CVE-2026-32288.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/vcluster-pro :0.0.0-ci-run.10	ab2e1fa19dd4	stdlib@go1.18.10	1.25.9
public.ecr.aws/eks-distro/etcd-io/etcd :v3.5.6-eks-1-24-7	efa6dee17ed2	stdlib@go1.16.15	1.25.9
public.ecr.aws/eks-distro/kubernetes/kube-apiserver :v1.24.9-eks-1-24-7	72e06b605692	stdlib@go1.18.9	1.25.9
public.ecr.aws/eks-distro/kubernetes/kube-controller-manager :v1.24.9-eks-1-24-7	eaea8c230432	stdlib@go1.18.9	1.25.9

Open the chart page →

5,951

vcluster-pro-k0sloft

0.0.0-ci-run.10

2 of 2 See more

vcluster-pro-k0s loft 0.0.0-ci-run.10

2 of the 2 container images this version deploys carry CVE-2026-32288.

Container image	Digest	Package	Fixed in
k0sproject/k0s :v1.26.0-k0s.0	f04635825d51	stdlib@go1.19.4	1.25.9
ghcr.io/loft-sh/vcluster-pro :0.0.0-ci-run.10	ab2e1fa19dd4	stdlib@go1.18.10	1.25.9

Open the chart page →

5,786

vcluster-pro-k8sloft

0.0.0-ci-run.10

4 of 4 See more

vcluster-pro-k8s loft 0.0.0-ci-run.10

4 of the 4 container images this version deploys carry CVE-2026-32288.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/vcluster-pro :0.0.0-ci-run.10	ab2e1fa19dd4	stdlib@go1.18.10	1.25.9
registry.k8s.io/etcd :3.5.6-0	dd75ec974b0a	stdlib@go1.16.15	1.25.9
registry.k8s.io/kube-apiserver :v1.26.1	99e1ed9fbc8a	stdlib@go1.19.5	1.25.9
registry.k8s.io/kube-controller-manager :v1.26.1	40adecbe3a40	stdlib@go1.19.5	1.25.9

Open the chart page →

8,235

virtualclusterloft

0.0.28

1 of 2 See more

virtualcluster loft 0.0.28

1 of the 2 container images this version deploys carry CVE-2026-32288.

Container image	Digest	Package	Fixed in
loftsh/virtual-cluster :0.0.28	023b13bf5898	stdlib@go1.15.11	1.25.9

Open the chart page →

2,993

vnode-runtimeloft

0.3.3

1 of 1 See more

vnode-runtime loft 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-32288.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/vnode-runtime :0.3.3	b065ec5a5239	stdlib@go1.24.2	1.25.9

Open the chart page →

2,518

loggingcomponentloggingcomponent

1.0.0

1 of 3 See more

loggingcomponent loggingcomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-32288.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/loggingcomponent-php :latest	834b8e1af290	stdlib@go1.13.10	1.25.9

Open the chart page →

7,501

nightingalelogic3579

0.3.1

3 of 6 See more

nightingale logic3579 0.3.1

3 of the 6 container images this version deploys carry CVE-2026-32288.

Container image	Digest	Package	Fixed in
flashcatcloud/nightingale :8.5.1	421acb36181b	stdlib@go1.24.0	1.25.9
library/mysql :5.7	4bc6bc963e6d	stdlib@go1.18.2	1.25.9
quay.io/prometheus/prometheus :v2.54.1	f6639335d34a	stdlib@go1.22.6	1.25.9

Open the chart page →

9,062

logicservicelogicservice

1.0.0

1 of 4 See more

logicservice logicservice 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-32288.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/logicservice-php :latest	72aae2080595	stdlib@go1.13.10	1.25.9

Open the chart page →

7,508

0.1.0

1 of 2 See more

login-test-backend login-test-backend 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-32288.

Container image	Digest	Package	Fixed in
aboogie/login_test_backend :new	9c41a4483ac8	stdlib@go1.22.5	1.25.9

Open the chart page →

6,578

apica-ascentlogiqai

2.0.4

7 of 19 See more

apica-ascent logiqai 2.0.4

7 of the 19 container images this version deploys carry CVE-2026-32288.

Container image	Digest	Package	Fixed in
logiqai/flash :v3.10.2	65b996bc7bdc	stdlib@go1.21.13	1.25.9
logiqai/flash-discovery :v2.0.3	f5b551bca98e	stdlib@go1.18.9	1.25.9
logiqai/logiqctl :2.0.4	798306811f2d	stdlib@go1.13.7	1.25.9
logiqai/tracing :v1.35.2-lq1-c	3e149f6781b8	stdlib@go1.18.2	1.25.9
logiqai/tracing :v1.35.2-lq1-q	4a746ff04d6a	stdlib@go1.18.2	1.25.9
minio/mc :RELEASE.2020-03-14T01-23-37Z	571feb124476	stdlib@go1.13.8	1.25.9
minio/minio :RELEASE.2020-09-17T04-49-20Z	e2b7b633c250	stdlib@go1.14.9	1.25.9

Open the chart page →

23,689

logtidelogtide

2.1.14

1 of 4 See more

logtide logtide 2.1.14

1 of the 4 container images this version deploys carry CVE-2026-32288.

Container image	Digest	Package	Fixed in
timescale/timescaledb :latest-pg15	6343bdc87ca1	stdlib@go1.24.6	1.25.9

Open the chart page →

2,775

loki-proxyloki-proxy

0.4.1

1 of 1 See more

loki-proxy loki-proxy 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-32288.

Container image	Digest	Package	Fixed in
ghcr.io/peak-scale/observability-tenancy/loki-proxy :0.4.1	548e962d0061	stdlib@go1.24.6	1.25.9

Open the chart page →

788

loxilbloxilb

0.1.0

2 of 2 See more

loxilb loxilb 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-32288.

Container image	Digest	Package	Fixed in
ghcr.io/loxilb-io/kube-loxilb :latest	6f65e53e252d	stdlib@go1.23.12	1.25.9
ghcr.io/loxilb-io/loxilb :latest	c7ede1bab641	stdlib@go1.22.5	1.25.9

Open the chart page →

4,513

lsdisklsdisk

2.0.7

3 of 4 See more

lsdisk lsdisk 2.0.7

3 of the 4 container images this version deploys carry CVE-2026-32288.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.12.0	0d23a6fd60c4	stdlib@go1.22.5	1.25.9
registry.k8s.io/sig-storage/csi-provisioner :v5.0.2	7b9cdb5830d0	stdlib@go1.22.5	1.25.9
registry.k8s.io/sig-storage/csi-resizer :v1.9.0	f1f352df9787	stdlib@go1.20.5	1.25.9

Open the chart page →

5,074

chronograflsst-sqre

1.3.5

1 of 1 See more

chronograf lsst-sqre 1.3.5

1 of the 1 container images this version deploys carry CVE-2026-32288.

Container image	Digest	Package	Fixed in
quay.io/influxdb/chronograf :1.9.4	bb0a980bc2bf	stdlib@go1.16.4	1.25.9

Open the chart page →

2,349

fireflylsst-sqre

0.3.7

1 of 2 See more

firefly lsst-sqre 0.3.7

1 of the 2 container images this version deploys carry CVE-2026-32288.

Container image	Digest	Package	Fixed in
library/redis :5	fc5ecd863862	stdlib@go1.16.7	1.25.9

Open the chart page →

1,731

sasquatchlsst-sqre

0.1.13

2 of 6 See more

sasquatch lsst-sqre 0.1.13

2 of the 6 container images this version deploys carry CVE-2026-32288.

Container image	Digest	Package	Fixed in
library/kapacitor :1.6.3	7232f6388a4d	stdlib@go1.17.2	1.25.9
quay.io/influxdb/chronograf :1.9.3	c2ed16080689	stdlib@go1.16.4	1.25.9

Open the chart page →

9,347

squash-apilsst-sqre

0.1.6

1 of 3 See more

squash-api lsst-sqre 0.1.6

1 of the 3 container images this version deploys carry CVE-2026-32288.

Container image	Digest	Package	Fixed in
gcr.io/cloudsql-docker/gce-proxy :1.17	a85176b8e7cc	stdlib@go1.13.5	1.25.9

Open the chart page →

6,642

telegraf-dslsst-sqre

1.0.23

1 of 1 See more

telegraf-ds lsst-sqre 1.0.23

1 of the 1 container images this version deploys carry CVE-2026-32288.

Container image	Digest	Package	Fixed in
library/telegraf :1.19-alpine	addb86c0c520	stdlib@go1.16.6	1.25.9

Open the chart page →

3,773

Container images carrying it

4,376 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
alazidis/kube-netlag :1.1.0	0e8c84152201	stdlib@go1.24.13	1.25.9	2
alpine/git :2.47.2	062a01ad7a0e	stdlib@go1.23.9	1.25.9	2
alpine/k8s :1.32.12	048f8d9c8cc7	stdlib@go1.25.7	1.25.9	2
alpine/kubectl :1.35.2	ec8f734b0a10	stdlib@go1.25.7	1.25.9	2
altinity/clickhouse-operator :0.21.2	cd9252644ce0	stdlib@go1.19.10	1.25.9	2
altinity/metrics-exporter :0.21.2	df3d57215356	stdlib@go1.19.10	1.25.9	2
apache/superset :dockerize	afe59523a6c8	stdlib@go1.20.4	1.25.9	2
apecloud/apecloud-mcp :0.1.0	94041b080510	stdlib@go1.23.7	1.25.9	2
aquasec/kube-bench :v0.8.0	ea3e33bc3c4e	stdlib@go1.21.7	1.25.9	2
assistiot/fl_repository_db :latest	ad8f72108636	stdlib@go1.17.10	1.25.9	2
ayushsobti/kube-monkey :v0.5.2	4c94e8f8924e	stdlib@go1.18.9	1.25.9	2
bitnamilegacy/elasticsearch :9.1.2-debian-12-r0	00176a47afa0	stdlib@go1.24.6	1.25.9	2
bitnamilegacy/etcd :latest	99b408c15272	stdlib@go1.23.10	1.25.9	2
bitnamilegacy/influxdb :2.6.1-debian-11-r18	d17df1f9d745	stdlib@go1.19.6	1.25.9	2
bitnamilegacy/kubectl :1.26.4	a0a972324d93	stdlib@go1.19.8	1.25.9	2
bitnamilegacy/mariadb :11.4.5-debian-12-r9	33ce23601fc9	stdlib@go1.23.7	1.25.9	2
bitnamilegacy/mongodb :4.4.1	4fe2bd7b4036	stdlib@go1.15.1	1.25.9	2
bitnamilegacy/pgpool :4.6.3-debian-12-r0	d3bf3910f148	stdlib@go1.25.0	1.25.9	2
bitnamilegacy/postgresql :14.4.0-debian-11-r23	7e7ebb082031	stdlib@go1.16.7	1.25.9	2
bitnamilegacy/redis :latest	5927ff3702df	stdlib@go1.24.5	1.25.9	2
bitnamilegacy/valkey-cluster :8.1.3-debian-12-r3	32869e769b7e	stdlib@go1.24.6	1.25.9	2
bitnamilegacy/zookeeper :3.9.0-debian-11-r11	10ed1ea3c8d1	stdlib@go1.19.12	1.25.9	2
bitnamisecure/git	72ae5bd9715f	stdlib@go1.24.6	1.25.9	2
bitpoke/mysql-operator :v0.6.3	f44fa86ab27e	stdlib@go1.17.13	1.25.9	2
bitpoke/mysql-operator-orchestrator :v0.6.3	d86560c75bed	stdlib@go1.19.9	1.25.9	2
cagriekin/pg-ha :2.0.1-pg18	99e17aa165df	stdlib@go1.24.4	1.25.9	2
casbin/casdoor :3.62.1	7729da148c61	stdlib@go1.25.8	1.25.9	2
cesanta/docker_auth :1.6.0	4d16885f3d4c	stdlib@go1.13.7	1.25.9	2
cfssl/cfssl :latest :v1.6.5	c9018c2ddf0b	stdlib@go1.20.14	1.25.9	2
chankh/k8s-cloudwatch-adapter :v0.9.0	963c44c7f8b1	stdlib@go1.14.5	1.25.9	2
clickhouse/clickhouse-server :24.2	ed9640bfff07	stdlib@go1.19.10	1.25.9	2
containersol/locust_exporter :v0.4.1	a914972d19ad	stdlib@go1.15.8	1.25.9	2
coredns/coredns :1.13.1	9b9128672209	stdlib@go1.25.2	1.25.9	2
crate/crate_adapter :latest	b8d89fa5d19b	stdlib@go1.16.3	1.25.9	2
cs3org/revad :v1.19.0	3b57a34a7dfd	stdlib@go1.17.3	1.25.9	2
cs3org/revad :v1.24.0	e80a4d67b352	stdlib@go1.20.4	1.25.9	2
csiplugin/csi-qingcloud :v1.4.0	0766163dc046	stdlib@go1.19.13	1.25.9	2
danielfm/aws-limits-exporter :0.6.0	7152b84e57cb	stdlib@go1.17.2	1.25.9	2
danielqsj/kafka-exporter :v1.9.0	4150e46b2e96	stdlib@go1.24.0	1.25.9	2
datawire/aes :1.14.4	8588eafe6862	stdlib@go1.15	1.25.9	2
devopsfaith/krakend :latest	f8bdaa8a1a43	stdlib@go1.24.2	1.25.9	2
dmilhdef/missing-container-metrics :v0.21.0	fada1a6e7638	stdlib@go1.16.2	1.25.9	2
drone/drone-runner-kube :1.0.0-rc.3	4359bf2bb3dc	stdlib@go1.16.15	1.25.9	2
dtzar/helm-kubectl :3.14.4	55429449408e	stdlib@go1.21.8	1.25.9	2
eqalpha/keydb :latest	6537505c4235	stdlib@go1.16.7	1.25.9	2
eqalpha/keydb :x86_64_v6.3.4	eceb1806730c	stdlib@go1.16.7	1.25.9	2
falcosecurity/falco-driver-loader :0.33.1	1fe583eee4af	stdlib@go1.18.6	1.25.9	2
falcosecurity/falco-no-driver :0.33.1	0d427b8d5fc6	stdlib@go1.18.6	1.25.9	2
filebrowser/filebrowser :v2.23.0	86e8449ff8ff	stdlib@go1.18.3	1.25.9	2
free5gc/amf :v3.4.3	1bc96ff5a2a6	stdlib@go1.21.8	1.25.9	2