StackRadar

CVE-2026-32289

Medium

Advisory

Published 7 Apr 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.1
base score, highest
EPSS
0.003
22nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,842
of 17,797 indexed, latest versions
Container images
4,387
deployed by those charts
Fix available
1 of 2
affected packages

JsBraceDepth Context Tracking Bugs (XSS) in html/template

Carried by container images the latest versions of 3,842 of 17,797 indexed charts deploy, on 4,387 images.

Affected packageAffected versionsFixed inImages
golang-1.19deb1.19.8-2no fix listed1
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+177 more1.25.94,387
OSV records
DEBIAN-CVE-2026-32289GO-2026-4865
Also known as
BIT-golang-2026-32289

Charts affected

3,842 by stars
ChartLatestAffected imagesRadar Score
games-on-whalesangelnu2.0.01 of 7See more

games-on-whales angelnu 2.0.0

1 of the 7 container images this version deploys carry CVE-2026-32289.

Container imageDigestPackageFixed in
andrewmackrodt/firefox-x11:142.0.1-r133f9080470c9
stdlib@go1.18.2
1.25.9

Open the chart page →

42,253
maddyangelnu5.0.01 of 1See more

maddy angelnu 5.0.0

1 of the 1 container images this version deploys carry CVE-2026-32289.

Container imageDigestPackageFixed in
ghcr.io/foxcpp/maddy:0.9.5de42151adff6
stdlib@go1.23.12
1.25.9

Open the chart page →

774
cert-manager-webhook-safednsansgroupVerified publisher1.3.01 of 1See more

cert-manager-webhook-safedns ansgroup 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-32289.

Container imageDigestPackageFixed in
ansgroup/cert-manager-webhook-safedns:v1.0.1cd6b0ef2b309
stdlib@go1.13.15
1.25.9

Open the chart page →

2,495
ddosifyanteonVerified publisher1.7.55 of 13See more

ddosify anteon 1.7.5

5 of the 13 container images this version deploys carry CVE-2026-32289.

Container imageDigestPackageFixed in
chrislusf/seaweedfs:3.56ed80f00fde46
stdlib@go1.20.8
1.25.9
ddosify/selfhosted_hammer:1.4.2a97a1b8a66af
stdlib@go1.18.1
1.25.9
library/influxdb:2.6.1-alpine44a366dd7724
stdlib@go1.19.4
1.25.9
library/redis:7.2.4-alpinec8bb255c3559
stdlib@go1.18.2
1.25.9
prom/prometheus:v2.37.98176adea328e
stdlib@go1.19.11
1.25.9

Open the chart page →

26,070
antmediaantmediaVerified publisher3.1.03 of 4See more

antmedia antmedia 3.1.0

3 of the 4 container images this version deploys carry CVE-2026-32289.

Container imageDigestPackageFixed in
library/mongo:8.002a0cc7939f5
stdlib@go1.24.6
1.25.9
registry.k8s.io/ingress-nginx/controller:v1.5.14ba73c697770
stdlib@go1.19.2
1.25.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20220916-gd32f8c34339c5b2e3310d
stdlib@go1.19.1
1.25.9

Open the chart page →

4,631
ingress-nginxantmediaVerified publisher4.4.02 of 2See more

ingress-nginx antmedia 4.4.0

2 of the 2 container images this version deploys carry CVE-2026-32289.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.5.14ba73c697770
stdlib@go1.19.2
1.25.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20220916-gd32f8c34339c5b2e3310d
stdlib@go1.19.1
1.25.9

Open the chart page →

3,323
monitoringantmediaVerified publisher1.0.01 of 6See more

monitoring antmedia 1.0.0

1 of the 6 container images this version deploys carry CVE-2026-32289.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
stdlib@go1.25.7
1.25.9

Open the chart page →

2,461
nfs-server-provisioneranvibo1.3.01 of 1See more

nfs-server-provisioner anvibo 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-32289.

Container imageDigestPackageFixed in
gcr.io/k8s-staging-sig-storage/nfs-provisioner:v3.0.02de1d15fc1f2
stdlib@go1.15
1.25.9

Open the chart page →

2,731
glauthanza-labsVerified publisher1.0.11 of 1See more

glauth anza-labs 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-32289.

Container imageDigestPackageFixed in
ghcr.io/glauth/glauth:v2.5.209c782ca5984
stdlib@go1.25.0
1.25.9

Open the chart page →

1,309
apipingapiping1.5.01 of 1See more

apiping apiping 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-32289.

Container imageDigestPackageFixed in
udhos/apiping:1.5.041ab9bae6f3b
stdlib@go1.25.4
1.25.9

Open the chart page →

1,139
apishiftapishiftVerified publisher0.3.01 of 4See more

apishift apishift 0.3.0

1 of the 4 container images this version deploys carry CVE-2026-32289.

Container imageDigestPackageFixed in
quay.io/everythingascode/apishift-backend:v0.3.014ff275b2e61
stdlib@go1.23.6
1.25.9

Open the chart page →

2,962
api-usage-cleanerapi-usage-cleaner1.16.01 of 1See more

api-usage-cleaner api-usage-cleaner 1.16.0

1 of the 1 container images this version deploys carry CVE-2026-32289.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/api-usage-cleaner:1.16.0d47f43484055
stdlib@go1.23.12
1.25.9

Open the chart page →

596
d.vazquezm.2021_helmapphelmVerified publisher1.0.02 of 6See more

d.vazquezm.2021_helm apphelm 1.0.0

2 of the 6 container images this version deploys carry CVE-2026-32289.

Container imageDigestPackageFixed in
library/mongo:5.0.6-focal8e70544b6c76
stdlib@go1.16.7
1.25.9
library/mysql:8.0.28fc77d54cacef
stdlib@go1.16.7
1.25.9

Open the chart page →

19,799
app-mobilityappmo0.1.03 of 5See more

app-mobility appmo 0.1.0

3 of the 5 container images this version deploys carry CVE-2026-32289.

Container imageDigestPackageFixed in
dellemc/csm-application-mobility-controller:v0.1.0148ada9060a9
stdlib@go1.18.5
1.25.9
dellemc/csm-application-mobility-velero-plugin:v0.1.0660cabd6d929
stdlib@go1.18.5
1.25.9
velero/velero:v1.8.18d784580931c
stdlib@go1.16.6
1.25.9

Open the chart page →

12,542
app-movies-seriesapp-movies-seriesVerified publisher0.1.01 of 2See more

app-movies-series app-movies-series 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-32289.

Container imageDigestPackageFixed in
library/postgres:14.32d1e636f0778
stdlib@go1.16.7
1.25.9

Open the chart page →

3,168
accounts-uiappscodeVerified publisher2026.9.111 of 1See more

accounts-ui appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-32289.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
stdlib@go1.25.3
1.25.9

Open the chart page →

2,660
aceappscodeVerified publisher2026.9.112 of 2See more

ace appscode 2026.9.11

2 of the 2 container images this version deploys carry CVE-2026-32289.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
stdlib@go1.25.3
1.25.9
ghcr.io/appscode/kubectl-nonroot:1.340b26892cec94
stdlib@go1.24.13
1.25.9

Open the chart page →

2,962
ace-installerappscodeVerified publisher2026.9.111 of 2See more

ace-installer appscode 2026.9.11

1 of the 2 container images this version deploys carry CVE-2026-32289.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
stdlib@go1.25.3
1.25.9

Open the chart page →

3,301
ace-installer-certifiedappscodeVerified publisher2026.9.111 of 2See more

ace-installer-certified appscode 2026.9.11

1 of the 2 container images this version deploys carry CVE-2026-32289.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
stdlib@go1.25.3
1.25.9

Open the chart page →

3,301
acerproxyappscodeVerified publisher2026.9.111 of 1See more

acerproxy appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-32289.

Container imageDigestPackageFixed in
ghcr.io/appscode/acerproxy:v0.2.021de3771fdd5
stdlib@go1.25.5
1.25.9

Open the chart page →

1,323
aceshifterappscodeVerified publisher2026.9.111 of 1See more

aceshifter appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-32289.

Container imageDigestPackageFixed in
ghcr.io/appscode/aceshifter:v0.0.3e5f5c254a55a
stdlib@go1.25.8
1.25.9

Open the chart page →

1,038
appscode-otel-stackappscodeVerified publisher2026.7.152 of 3See more

appscode-otel-stack appscode 2026.7.15

2 of the 3 container images this version deploys carry CVE-2026-32289.

Container imageDigestPackageFixed in
rancher/kubectl:v1.34.1090bef429ed1
stdlib@go1.24.6
1.25.9
quay.io/brancz/kube-rbac-proxy:v0.20.0147cb28fea35
stdlib@go1.25.1
1.25.9

Open the chart page →

1,435
auditorappscodeVerified publisher2023.10.11 of 1See more

auditor appscode 2023.10.1

1 of the 1 container images this version deploys carry CVE-2026-32289.

Container imageDigestPackageFixed in
ghcr.io/appscode/auditor:v0.0.1c62c89ee706d
stdlib@go1.19.4
1.25.9

Open the chart page →

1,680
billingappscodeVerified publisher2026.9.111 of 1See more

billing appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-32289.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
stdlib@go1.25.3
1.25.9

Open the chart page →

2,660
capa-vpc-peering-operatorappscodeVerified publisher2023.12.111 of 1See more

capa-vpc-peering-operator appscode 2023.12.11

1 of the 1 container images this version deploys carry CVE-2026-32289.

Container imageDigestPackageFixed in
ghcr.io/appscode/capa-vpc-peering-operator:v0.0.4b1557553a2b3
stdlib@go1.21.5
1.25.9

Open the chart page →

1,433
capi-ops-managerappscodeVerified publisher2024.8.142 of 2See more

capi-ops-manager appscode 2024.8.14

2 of the 2 container images this version deploys carry CVE-2026-32289.

Container imageDigestPackageFixed in
ghcr.io/appscode/capi-ops-manager:v0.0.57465f35b684c
stdlib@go1.23.2
1.25.9
ghcr.io/appscode/kube-rbac-proxy:v0.11.00df4ae70e3bd
stdlib@go1.15.14
1.25.9

Open the chart page →

3,430
cert-manager-csi-driver-cacertsappscodeVerified publisher2026.9.182See more

cert-manager-csi-driver-cacerts appscode 2026.9.18

2 container images this version deploys carry CVE-2026-32289.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.14.05244abbe87e0
stdlib@go1.24.2
1.25.9
registry.k8s.io/sig-storage/livenessprobe:v2.16.088092d100909
stdlib@go1.24.2
1.25.9

Open the chart page →

—
cert-manager-webhook-aceappscodeVerified publisher2026.9.111 of 1See more

cert-manager-webhook-ace appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-32289.

Container imageDigestPackageFixed in
ghcr.io/appscode/cert-manager-webhook-ace:v0.0.2dc6b5fdcec06
stdlib@go1.25.5
1.25.9

Open the chart page →

1,316
cluster-auth-agentappscodeVerified publisher2026.2.161 of 1See more

cluster-auth-agent appscode 2026.2.16

1 of the 1 container images this version deploys carry CVE-2026-32289.

Container imageDigestPackageFixed in
ghcr.io/kluster-manager/cluster-auth:v0.5.1fba6fb872281
stdlib@go1.25.7
1.25.9

Open the chart page →

985
cluster-auth-managerappscodeVerified publisher2026.2.161 of 1See more

cluster-auth-manager appscode 2026.2.16

1 of the 1 container images this version deploys carry CVE-2026-32289.

Container imageDigestPackageFixed in
ghcr.io/kluster-manager/cluster-auth:v0.5.1fba6fb872281
stdlib@go1.25.7
1.25.9

Open the chart page →

985
cluster-connectorappscodeVerified publisher2025.12.151 of 1See more

cluster-connector appscode 2025.12.15

1 of the 1 container images this version deploys carry CVE-2026-32289.

Container imageDigestPackageFixed in
ghcr.io/appscode/cluster-connector:v0.0.140efd9d9ef6ca
stdlib@go1.25.5
1.25.9

Open the chart page →

619
cluster-manager-hubappscodeVerified publisher2026.2.161 of 1See more

cluster-manager-hub appscode 2026.2.16

1 of the 1 container images this version deploys carry CVE-2026-32289.

Container imageDigestPackageFixed in
ghcr.io/kluster-manager/registration-operator:v1.2.00cbced8e6240
stdlib@go1.25.7
1.25.9

Open the chart page →

1,063
cluster-proxyappscodeVerified publisher2024.2.251 of 1See more

cluster-proxy appscode 2024.2.25

1 of the 1 container images this version deploys carry CVE-2026-32289.

Container imageDigestPackageFixed in
ghcr.io/kluster-manager/cluster-proxy:latest27a5c64b7ea8
stdlib@go1.21.8
1.25.9

Open the chart page →

1,126
cluster-proxy-managerappscodeVerified publisher2026.6.261 of 1See more

cluster-proxy-manager appscode 2026.6.26

1 of the 1 container images this version deploys carry CVE-2026-32289.

Container imageDigestPackageFixed in
ghcr.io/kluster-manager/cluster-proxy:v0.10.1a7fce69e171c
stdlib@go1.22.4
1.25.9

Open the chart page →

1,472
dns-proxyappscodeVerified publisher2026.9.111 of 1See more

dns-proxy appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-32289.

Container imageDigestPackageFixed in
ghcr.io/appscode/cloudflare-dns-proxy:v0.0.5dfbef0285e14
stdlib@go1.25.5
1.25.9

Open the chart page →

648
docker-machine-operatorappscodeVerified publisher2024.7.91 of 1See more

docker-machine-operator appscode 2024.7.9

1 of the 1 container images this version deploys carry CVE-2026-32289.

Container imageDigestPackageFixed in
ghcr.io/appscode/docker-machine-operator:v0.0.481f6007abb4e
stdlib@go1.22.4
1.25.9

Open the chart page →

2,227
falco-ui-serverappscodeVerified publisher2026.1.152 of 2See more

falco-ui-server appscode 2026.1.15

2 of the 2 container images this version deploys carry CVE-2026-32289.

Container imageDigestPackageFixed in
rancher/kine:v0.11.412889bbcd1e8
stdlib@go1.21.5
1.25.9
ghcr.io/appscode/falco-ui-server:v0.0.66ec488d89b56
stdlib@go1.25.5
1.25.9

Open the chart page →

2,887
fluxcd-addon-managerappscodeVerified publisher2024.2.251 of 1See more

fluxcd-addon-manager appscode 2024.2.25

1 of the 1 container images this version deploys carry CVE-2026-32289.

Container imageDigestPackageFixed in
ghcr.io/kluster-manager/fluxcd-addon:v0.0.23acba3df8827
stdlib@go1.22.3
1.25.9

Open the chart page →

1,311
fluxcd-managerappscodeVerified publisher2026.2.161 of 1See more

fluxcd-manager appscode 2026.2.16

1 of the 1 container images this version deploys carry CVE-2026-32289.

Container imageDigestPackageFixed in
ghcr.io/kluster-manager/fluxcd-addon:v0.0.103475404bef5c
stdlib@go1.25.6
1.25.9

Open the chart page →

1,101
gateway-converterappscodeVerified publisher2024.8.301 of 1See more

gateway-converter appscode 2024.8.30

1 of the 1 container images this version deploys carry CVE-2026-32289.

Container imageDigestPackageFixed in
ghcr.io/voyagermesh/gateway-converter:v0.0.1b92123805584
stdlib@go1.23.1
1.25.9

Open the chart page →

1,275
gcp-credential-managerappscodeVerified publisher2026.3.111 of 1See more

gcp-credential-manager appscode 2026.3.11

1 of the 1 container images this version deploys carry CVE-2026-32289.

Container imageDigestPackageFixed in
ghcr.io/appscode/gcp-credential-manager:v0.1.0b58345fe8209
stdlib@go1.25.8
1.25.9

Open the chart page →

1,067
gh-ci-webhookappscodeVerified publisher2026.9.111 of 1See more

gh-ci-webhook appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-32289.

Container imageDigestPackageFixed in
ghcr.io/appscode/gh-ci-webhook:v0.0.2036ce246d884e
stdlib@go1.24.0
1.25.9

Open the chart page →

1,248
grafanaappscodeVerified publisher2026.9.111 of 1See more

grafana appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-32289.

Container imageDigestPackageFixed in
ghcr.io/appscode/grafana:v2025.2.367d18880448c
stdlib@go1.17.1
1.25.9

Open the chart page →

2,340
inbox-agentappscodeVerified publisher2026.6.21 of 2See more

inbox-agent appscode 2026.6.2

1 of the 2 container images this version deploys carry CVE-2026-32289.

Container imageDigestPackageFixed in
ghcr.io/appscode/kube-rbac-proxy:v0.15.0d8cc6ffb9819
stdlib@go1.21.3
1.25.9

Open the chart page →

2,129
inbox-server-distributedappscodeVerified publisher2025.12.251 of 4See more

inbox-server-distributed appscode 2025.12.25

1 of the 4 container images this version deploys carry CVE-2026-32289.

Container imageDigestPackageFixed in
library/cassandra:4.1.37cbcec0086ac
stdlib@go1.18.2
1.25.9

Open the chart page →

15,764
james-komposeappscodeVerified publisher0.1.01 of 4See more

james-kompose appscode 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-32289.

Container imageDigestPackageFixed in
library/cassandra:4.1.37cbcec0086ac
stdlib@go1.18.2
1.25.9

Open the chart page →

17,169
kube-auth-managerappscodeVerified publisher2023.11.141 of 1See more

kube-auth-manager appscode 2023.11.14

1 of the 1 container images this version deploys carry CVE-2026-32289.

Container imageDigestPackageFixed in
ghcr.io/appscode/kube-auth-manager:v0.0.1789692ab9193
stdlib@go1.20.2
1.25.9

Open the chart page →

1,946
kube-auth-proxyappscodeVerified publisher2023.11.141 of 1See more

kube-auth-proxy appscode 2023.11.14

1 of the 1 container images this version deploys carry CVE-2026-32289.

Container imageDigestPackageFixed in
ghcr.io/appscode/kube-auth-manager:v0.0.1789692ab9193
stdlib@go1.20.2
1.25.9

Open the chart page →

1,946
kubedb-certifiedappscodeVerified publisher2026.7.101 of 8See more

kubedb-certified appscode 2026.7.10

1 of the 8 container images this version deploys carry CVE-2026-32289.

Container imageDigestPackageFixed in
ghcr.io/appscode/kubectl-nonroot:1.340b26892cec94
stdlib@go1.24.13
1.25.9

Open the chart page →

4,180
kubedb-communityappscodeVerified publisher0.24.21 of 2See more

kubedb-community appscode 0.24.2

1 of the 2 container images this version deploys carry CVE-2026-32289.

Container imageDigestPackageFixed in
kubedb/operator:v0.24.01a06ff0bda52
stdlib@go1.17.6
1.25.9

Open the chart page →

2,557

Container images carrying it

4,387 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
slamdev/config-connector-templater:0.0.3a234541c9fa8
stdlib@go1.16.5
1.25.9
1
slamdev/external-secrets-operator:0.0.8855f6625dda4
stdlib@go1.13.15
1.25.9
1
slamdev/flux-notifier:v0.0.8b173d809132d
stdlib@go1.13.11
1.25.9
1
slamdev/gke-preemptible-notifier:v0.0.3d5d6430108a3
stdlib@go1.13.11
1.25.9
1
smailkoz/torrserver:1.0.1117b52d15de8f0
stdlib@go1.17.5
1.25.9
1
softonic/homing-pigeon:0.9.6f26d467b7b82
stdlib@go1.23.10
1.25.9
1
softonic/node-policy-webhook:0.1.2ab6098c04a53
stdlib@go1.14.6
1.25.9
1
softonic/pod-defaulter:0.1.072017aed5902
stdlib@go1.14.9
1.25.9
1
softonic/preemptible-killer:1.2.6-294b87f1fb362
stdlib@go1.14.10
1.25.9
1
softonic/rate-limit-operator:0.1.1910f6de37763
stdlib@go1.13.15
1.25.9
1
soldevelo/pgpool:4.6.3-debian-12-r0044d16a65129
stdlib@go1.25.4
1.25.9
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
stdlib@go1.18.2
1.25.9
1
sonroyaalmerol/docker-sogo:5.12.43f60f3abe990
stdlib@go1.24.13
1.25.9
1
sophos/nginx-vts-exporter:latestf1073556b29b
stdlib@go1.13.6
1.25.9
1
sorintlab/stolon:v0.16.0-pg1236b45c0f97fc
stdlib@go1.13.8
1.25.9
1
sosedoff/pgweb:latesta5256d416e2e
stdlib@go1.24.6
1.25.9
1
speckle/alertmanager-discord:latestf6221ff308e9
stdlib@go1.22.4
1.25.9
1
splunk/splunk-operator:2.0.0c4e0d3146226
stdlib@go1.17.12
1.25.9
1
springhack/frpc_ingress:latest4aceb821da88
stdlib@go1.19.5
1.25.9
1
sstarcher/ecr-cleaner:0.1.12d43c390cb19
stdlib@go1.14.2
1.25.9
1
sstarcher/helm-exporter:0.5.011769d01ba35
stdlib@go1.13.6
1.25.9
1
sstarcher/kube-ebs-tagger:0.1.01f8cae8cfa80
stdlib@go1.13.9
1.25.9
1
stakater/gitwebhookproxy:v0.2.79c1226e5270cd
stdlib@go1.13.1
1.25.9
1
stakater/k8s-cost-optimizer:v0.0.5450415ce1b4e
stdlib@go1.17.8
1.25.9
1
stakater/konfigurator:v0.1.393409565b1ef5
stdlib@go1.17.13
1.25.9
1
stakater/reloader:v1.0.15f4b87a8e56d4
stdlib@go1.20.1
1.25.9
1
stakater/tronador:v0.0.137ce9acf2722
stdlib@go1.15.11
1.25.9
1
stakater/whitelister:v0.0.1639107924063e
stdlib@go1.13.1
1.25.9
1
stakater/workshop-operator:v0.0.3897bf456cc97c
stdlib@go1.16.13
1.25.9
1
stakkato95/twitter-service-analytics:0.1.05d48906d66b3
stdlib@go1.18.3
1.25.9
1
stakkato95/twitter-service-graphql:0.1.13cbe857234f2
stdlib@go1.18.3
1.25.9
1
stakkato95/twitter-service-tweets:0.1.18412d8a8cac3
stdlib@go1.18.3
1.25.9
1
stakkato95/twitter-service-users:0.1.1456049efee9a
stdlib@go1.18.3
1.25.9
1
stashapp/stash:latest24dbd7607174
stdlib@go1.13.15
1.25.9
1
stashapp/stash:v0.31.1df744af5a0c9
stdlib@go1.24.3
1.25.9
1
stashapp/stash-box:latesta534c8afdf39
stdlib@go1.23.10
1.25.9
1
statcan/ingress-istio-controller:1.4.0d7d6bd180c46
stdlib@go1.18.10
1.25.9
1
statcan/kubernetes-sidecar-terminator:2.0.2bc361ee7748f
stdlib@go1.19.10
1.25.9
1
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
stdlib@go1.15.6
1.25.9
1
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.10ebcf7f033b54
stdlib@go1.13.4
1.25.9
1
streamnative/pulsar_vault_init:v1.0.731533fa9fab7
stdlib@go1.17.11
1.25.9
1
stubin87/tiny-api:v1.1.02e5c42e92ec8
stdlib@go1.19.1
1.25.9
1
su541/cert-manager-desec-webhook:latest371ee33f83c1
stdlib@go1.19.10
1.25.9
1
subspacecommunity/subspace:1.5.0e2042b63fb35
stdlib@go1.14.6
1.25.9
1
summerwind/actions-runner-controller:v0.27.62128f81dbede
stdlib@go1.20.7
1.25.9
1
sumuduliya/hello-world:latestb7788a2984a3
stdlib@go1.19.13
1.25.9
1
supabase/gotrue:v2.189.0385184459f57
stdlib@go1.25.8
1.25.9
1
supabase/gotrue:v2.91.07174d551d720
stdlib@go1.20.7
1.25.9
1
supabase/gotrue:v2.163.0ba4ddc594b0b
stdlib@go1.22.3
1.25.9
1
supabase/postgres:17.6.1.136f371b5f3f2ac
stdlib@go1.26.1
1.25.9
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.