StackRadar

CVE-2026-33810

Unscored

Advisory

Published 7 Apr 2026In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
base score, highest
EPSS
0.003
27th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
141
of 17,781 indexed, latest versions
Container images
130
deployed by those charts
Fix available
1 of 1
affected package

Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509

Carried by container images the latest versions of 141 of 17,781 indexed charts deploy, on 130 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.26.0, go1.26.11.26.2130
OSV records
GO-2026-4866
Also known as
BIT-golang-2026-33810

Charts affected

141 by stars
ChartLatestAffected imagesRadar Score
blockyk8s-home-lab-repo11.2.11 of 1See more

blocky k8s-home-lab-repo 11.2.1

1 of the 1 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
ghcr.io/0xerr0r/blocky:v0.29.0a6d99f323d30
stdlib@go1.26.0
1.26.2

Open the chart page →

580
kbot-self-hostedkbot-self-hostedVerified publisher0.1.81 of 7See more

kbot-self-hosted kbot-self-hosted 0.1.8

1 of the 7 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.30206a6c708fc6
stdlib@go1.26.0
1.26.2

Open the chart page →

32,509
local-path-provisionerkir4hVerified publisher0.0.351 of 1See more

local-path-provisioner kir4h 0.0.35

1 of the 1 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
rancher/local-path-provisioner:v0.0.3534ff0847cc47
stdlib@go1.26.1
1.26.2

Open the chart page →

752
kpingkpingOfficialVerified publisher0.3.51 of 1See more

kping kping 0.3.5

1 of the 1 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
kayrosuno/kping:latestf3bd44b29b0d
stdlib@go1.26.1
1.26.2

Open the chart page →

2,190
pocket-idkubernetes-homelab-helm-chartsVerified publisher0.1.01 of 1See more

pocket-id kubernetes-homelab-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
ghcr.io/pocket-id/pocket-id:v2.7.045bdeaf3fcd6
stdlib@go1.26.0
1.26.2

Open the chart page →

1,513
kubernetes-nmstatekubernetes-nmstateVerified publisher0.87.01 of 1See more

kubernetes-nmstate kubernetes-nmstate 0.87.0

1 of the 1 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
quay.io/nmstate/kubernetes-nmstate-operator:v0.87.04dce694f01ea
stdlib@go1.26.0
1.26.2

Open the chart page →

354
easegresskubesphere-stable1.0.01 of 1See more

easegress kubesphere-stable 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
megaease/easegress:latestfad1c7452958
stdlib@go1.26.1
1.26.2

Open the chart page →

1,308
everest-lakefs-csi-driverlakefsVerified publisher1.3.02 of 3See more

everest-lakefs-csi-driver lakefs 1.3.0

2 of the 3 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
public.ecr.aws/csi-components/csi-node-driver-registrar:v2.16.0-eksbuild.3592d7034d6c7
stdlib@go1.26.1
1.26.2
public.ecr.aws/csi-components/livenessprobe:v2.18.0-eksbuild.38e307f4e5820
stdlib@go1.26.1
1.26.2

Open the chart page →

841
listmonklbenicio-communityVerified publisher0.1.01 of 1See more

listmonk lbenicio-community 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
listmonk/listmonk:latestf535d59e1499
stdlib@go1.26.1
1.26.2

Open the chart page →

720
weather-app-chartlocal-weatherapp0.1.01 of 4See more

weather-app-chart local-weatherapp 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
youssef11gaber10/deployment-auth-go:latest6597b26959d2
stdlib@go1.26.1
1.26.2

Open the chart page →

5,905
qbittorrentm0nsterrr-qbittorrentVerified publisher7.1.21 of 2See more

qbittorrent m0nsterrr-qbittorrent 7.1.2

1 of the 2 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
ghcr.io/squat/generic-device-plugin:0.2.066c8d5c270eb
stdlib@go1.26.1
1.26.2

Open the chart page →

756
mdai-hubmdai-hubVerified publisher0.10.11 of 14See more

mdai-hub mdai-hub 0.10.1

1 of the 14 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
quay.io/prometheus/node-exporter:v1.11.1-distroless6112664fd761
stdlib@go1.26.1
1.26.2

Open the chart page →

4,742
gar-credential-providermondu-aiVerified publisher0.2.11 of 1See more

gar-credential-provider mondu-ai 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
ghcr.io/mondu-ai/gar-credential-provider:latest25090d37afa9
stdlib@go1.26.0
1.26.2

Open the chart page →

708
minifluxmt1905021.1.61 of 3See more

miniflux mt190502 1.1.6

1 of the 3 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
miniflux/miniflux:2.2.18a3ca6bbc1f74
stdlib@go1.26.1
1.26.2

Open the chart page →

2,669
ingress-nginxmxytest4.15.12 of 2See more

ingress-nginx mxytest 4.15.1

2 of the 2 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.15.1594ceea76b01
stdlib@go1.26.1
1.26.2
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.6.901038e7de14b
stdlib@go1.26.1
1.26.2

Open the chart page →

1,547
netris-dpu-agentnetrisai0.1.01 of 1See more

netris-dpu-agent netrisai 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
netrisai/bare-metal-dpu-agent:4.7.0.003c271efe749d0
stdlib@go1.26.1
1.26.2

Open the chart page →

1,523
nexus-tasksnexus-tasks2.0.01 of 5See more

nexus-tasks nexus-tasks 2.0.0

1 of the 5 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
ghcr.io/ashvinbambhaniya/nexus-tasks-backend:2.0.0f80349eb018b
stdlib@go1.26.0
1.26.2

Open the chart page →

3,798
nri-memory-policynri-pluginsVerified publisher0.14.01 of 1See more

nri-memory-policy nri-plugins 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
ghcr.io/containers/nri-plugins/nri-memory-policy:v0.14.0531d21ec4ba2
stdlib@go1.26.0
1.26.2

Open the chart page →

265
nri-memory-qosnri-pluginsOfficialVerified publisher0.14.01 of 1See more

nri-memory-qos nri-plugins 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
ghcr.io/containers/nri-plugins/nri-memory-qos:v0.14.0c7c5c24ed894
stdlib@go1.26.0
1.26.2

Open the chart page →

265
nri-resctrl-monnri-pluginsVerified publisher0.14.01 of 1See more

nri-resctrl-mon nri-plugins 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
ghcr.io/containers/nri-plugins/nri-resctrl-mon:v0.14.0a9c9775fab70
stdlib@go1.26.0
1.26.2

Open the chart page →

265
nri-resource-annotatornri-pluginsVerified publisher0.14.01 of 1See more

nri-resource-annotator nri-plugins 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
ghcr.io/containers/nri-plugins/nri-resource-annotator:v0.14.08100a19e85f7
stdlib@go1.26.0
1.26.2

Open the chart page →

235
nri-resource-policy-templatenri-pluginsVerified publisher0.14.01 of 1See more

nri-resource-policy-template nri-plugins 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
ghcr.io/containers/nri-plugins/nri-resource-policy-template:v0.14.00edfc075277b
stdlib@go1.26.0
1.26.2

Open the chart page →

279
nri-sgx-epcnri-pluginsVerified publisher0.14.01 of 1See more

nri-sgx-epc nri-plugins 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
ghcr.io/containers/nri-plugins/nri-sgx-epc:v0.14.0b4c4d0d83c14
stdlib@go1.26.0
1.26.2

Open the chart page →

265
picoclawpicoclawVerified publisher0.1.261 of 1See more

picoclaw picoclaw 0.1.26

1 of the 1 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
ghcr.io/mattn/picoclaw:latest517556c8b144
stdlib@go1.26.0
1.26.2

Open the chart page →

1,556
redis-enforce-expireredis-enforce-expire1.0.01 of 1See more

redis-enforce-expire redis-enforce-expire 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
udhos/redis-enforce-expire:1.0.0615b6a7d742e
stdlib@go1.26.1
1.26.2

Open the chart page →

1,302
geopingrotationalVerified publisher1.3.21 of 1See more

geoping rotational 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
rotationalio/geoping:1.3.034bcb6fc3cb7
stdlib@go1.26.1
1.26.2

Open the chart page →

1,569
gotifyrubxkubeVerified publisher1.3.31 of 1See more

gotify rubxkube 1.3.3

1 of the 1 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
gotify/server:3.1.0be44495e4609
stdlib@go1.26.0
1.26.2

Open the chart page →

320
operatorshopware-storeVerified publisher1.8.11 of 1See more

operator shopware-store 1.8.1

1 of the 1 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
ghcr.io/shopware/shopware-operator:1.8.187db0eda7a03
stdlib@go1.26.0
1.26.2

Open the chart page →

571
sigstore-probersigstoreVerified publisher0.3.11 of 1See more

sigstore-prober sigstore 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
ghcr.io/sigstore/sigstore-probers/prober:v1.0.1d1e914e6d6b9
stdlib@go1.26.0
1.26.2

Open the chart page →

424
trilliansigstoreVerified publisher0.3.172 of 5See more

trillian sigstore 0.3.17

2 of the 5 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
ghcr.io/sigstore/scaffolding/trillian_log_serverdigest-pinned5a878e4e4f03
stdlib@go1.26.0
1.26.2
ghcr.io/sigstore/scaffolding/trillian_log_signerdigest-pinned28c5ff40963f
stdlib@go1.26.0
1.26.2

Open the chart page →

2,808
skyhook-agentskyhookVerified publisher1.3.151 of 1See more

skyhook-agent skyhook 1.3.15

1 of the 1 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
ghcr.io/skyhook-io/skyhook-connector:v2.3.23deb8e4b1aaa
stdlib@go1.26.0
1.26.2

Open the chart page →

299
slothsloth0.16.01 of 2See more

sloth sloth 0.16.0

1 of the 2 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
ghcr.io/slok/sloth:v0.16.0f0f0075b0d45
stdlib@go1.26.1
1.26.2

Open the chart page →

3,962
ingress-nginxsoftonic4.15.12 of 2See more

ingress-nginx softonic 4.15.1

2 of the 2 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.15.1594ceea76b01
stdlib@go1.26.1
1.26.2
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.6.901038e7de14b
stdlib@go1.26.1
1.26.2

Open the chart page →

1,547
spire-identity-exchangespiffeVerified publisher0.2.21 of 3See more

spire-identity-exchange spiffe 0.2.2

1 of the 3 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
ghcr.io/spiffe/spire-identity-exchange-server:v0.5.0239bc70c1988
stdlib@go1.26.0
1.26.2

Open the chart page →

1,427
spillwayspillwayVerified publisher0.4.41 of 1See more

spillway spillway 0.4.4

1 of the 1 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
ghcr.io/kroy-the-rabbit/spillway:0.4.48de556d3bda7
stdlib@go1.26.1
1.26.2

Open the chart page →

267
hub-managertraefikVerified publisher1.0.01 of 1See more

hub-manager traefik 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
ghcr.io/traefik/hub-manager:v0.45.1d1cff2560c67
stdlib@go1.26.0
1.26.2

Open the chart page →

634
muthurvojtechpastyrikVerified publisher0.10.01 of 1See more

muthur vojtechpastyrik 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
ghcr.io/vojtechpastyrik/muthur:0.10.0b5a06a6e13b9
stdlib@go1.26.1
1.26.2

Open the chart page →

313
muthur-collectorvojtechpastyrikVerified publisher0.11.01 of 1See more

muthur-collector vojtechpastyrik 0.11.0

1 of the 1 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
ghcr.io/vojtechpastyrik/muthur-collector:0.11.00a580fe3a032
stdlib@go1.26.1
1.26.2

Open the chart page →

313
wallarm-oobwallarmVerified publisher0.23.01 of 3See more

wallarm-oob wallarm 0.23.0

1 of the 3 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
wallarm/node-native-processing:0.23.07db2da8fce0b
stdlib@go1.26.0
1.26.2

Open the chart page →

2,824
rancherwenerme2.15.11 of 2See more

rancher wenerme 2.15.1

1 of the 2 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
rancher/rancher:v2.15.15f6c4dc52a05
stdlib@go1.26.1
1.26.2

Open the chart page →

1,456
victoria-metrics-k8s-stackwenerme0.92.11 of 7See more

victoria-metrics-k8s-stack wenerme 0.92.1

1 of the 7 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
quay.io/prometheus/node-exporter:v1.11.10f422f62c15f
stdlib@go1.26.1
1.26.2

Open the chart page →

1,889

Container images carrying it

130 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
redislabs/operator:8.0.18-119078e713bb6a
stdlib@go1.26.1
1.26.2
1
rotationalio/geoping:1.3.034bcb6fc3cb7
stdlib@go1.26.1
1.26.2
1
supabase/postgres:17.6.1.136f371b5f3f2ac
stdlib@go1.26.1
1.26.2
1
superque/smokeping-prober:v0.11.028ca636d1dee
stdlib@go1.26.1
1.26.2
1
tailscale/tailscale:v1.96.5dbeff02d2337
stdlib@go1.26.1
1.26.2
1
temporalio/admin-tools:1.28cfde8170c92f
stdlib@go1.26.1
1.26.2
1
trinodb/trino:4801565e8cac299
stdlib@go1.26.1
1.26.2
1
udhos/redis-enforce-expire:1.0.0615b6a7d742e
stdlib@go1.26.1
1.26.2
1
wallarm/node-native-processing:0.23.07db2da8fce0b
stdlib@go1.26.0
1.26.2
1
xperimental/nextcloud-exporter:0.9.13e90a3897651
stdlib@go1.26.1
1.26.2
1
yonahdissen/kor:latest1a85158c82bb
stdlib@go1.26.0
1.26.2
1
youssef11gaber10/deployment-auth-go:latest6597b26959d2
stdlib@go1.26.1
1.26.2
1
zachomedia/cert-manager-webhook-pdns:v2.5.54940e227a39b
stdlib@go1.26.1
1.26.2
1
ghcr.io/0xerr0r/blocky:v0.29.0a6d99f323d30
stdlib@go1.26.0
1.26.2
1
ghcr.io/ashvinbambhaniya/nexus-tasks-backend:2.0.0f80349eb018b
stdlib@go1.26.0
1.26.2
1
ghcr.io/astradns/astradns-agent:v0.2.9-unbound6ba69487f1b0
stdlib@go1.26.1
1.26.2
1
ghcr.io/astradns/astradns-operator:v0.2.909e58b62416a
stdlib@go1.26.1
1.26.2
1
ghcr.io/benc-uk/kubeview:latestb5b2b02e4c4e
stdlib@go1.26.0
1.26.2
1
ghcr.io/borchero/switchboard:0.7.454a193b757da
stdlib@go1.26.1
1.26.2
1
ghcr.io/containeroo/agent-forge-operator:v1.1.48f6d8acd134a
stdlib@go1.26.0
1.26.2
1
ghcr.io/containeroo/autovpa:v0.0.3425b801d8d1f7
stdlib@go1.26.0
1.26.2
1
ghcr.io/containeroo/cert-manager-webhook-bluecat:latest96f82d5840d4
stdlib@go1.26.0
1.26.2
1
ghcr.io/containeroo/cloudflare-operator:v1.10.60eda6d237a84
stdlib@go1.26.0
1.26.2
1
ghcr.io/containeroo/filesystem-exporter:v1.5.2a66121e16d4e
stdlib@go1.26.1
1.26.2
1
ghcr.io/containeroo/kube-ephemeral-container-exporter:v0.0.14b238f3c58d83
stdlib@go1.26.0
1.26.2
1
ghcr.io/containers/nri-plugins/nri-memory-policy:v0.14.0531d21ec4ba2
stdlib@go1.26.0
1.26.2
1
ghcr.io/containers/nri-plugins/nri-memory-qos:v0.14.0c7c5c24ed894
stdlib@go1.26.0
1.26.2
1
ghcr.io/containers/nri-plugins/nri-memtierd:v0.14.09138314e12ba
stdlib@go1.26.0
1.26.2
1
ghcr.io/containers/nri-plugins/nri-resctrl-mon:v0.14.0a9c9775fab70
stdlib@go1.26.0
1.26.2
1
ghcr.io/containers/nri-plugins/nri-resource-annotator:v0.14.08100a19e85f7
stdlib@go1.26.0
1.26.2
1
ghcr.io/containers/nri-plugins/nri-resource-policy-balloons:v0.14.0a8c8297c7274
stdlib@go1.26.0
1.26.2
1
ghcr.io/containers/nri-plugins/nri-resource-policy-template:v0.14.00edfc075277b
stdlib@go1.26.0
1.26.2
1
ghcr.io/containers/nri-plugins/nri-resource-policy-topology-aware:v0.14.0e2443833726a
stdlib@go1.26.0
1.26.2
1
ghcr.io/containers/nri-plugins/nri-sgx-epc:v0.14.0b4c4d0d83c14
stdlib@go1.26.0
1.26.2
1
ghcr.io/desuuuu/cluster-network-policy-operator:v1.1.0d943d13c5281
stdlib@go1.26.0
1.26.2
1
ghcr.io/devops-ia/steampipe:v2.4.1a982103d91d3
stdlib@go1.26.1
1.26.2
1
ghcr.io/edgelesssys/marblerun/coordinator:v1.9.2e589db0d0a2c
stdlib@go1.26.1
1.26.2
1
ghcr.io/ethpandaops/syncoor:master233aa9808fc7
stdlib@go1.26.0
1.26.2
1
ghcr.io/gomenhashai/gomenhashai:v1.3.36f031172a5ec
stdlib@go1.26.0
1.26.2
1
ghcr.io/grafana/grafana-operator:v5.22.2d45fc24e8f43
stdlib@go1.26.1
1.26.2
1
ghcr.io/henrywhitaker3/argo-zombies:v0.4.4316c397906c9
stdlib@go1.26.1
1.26.2
1
ghcr.io/hsn723/dkim-manager:1.4.00312232b31a2
stdlib@go1.26.0
1.26.2
1
ghcr.io/jkroepke/kube-webhook-certgen:1.8.043401e216e89
stdlib@go1.26.1
1.26.2
1
ghcr.io/kokuwaio/gcloud-mysql:v3.2.1963098135c550
stdlib@go1.26.1
1.26.2
1
ghcr.io/kroy-the-rabbit/spillway:0.4.48de556d3bda7
stdlib@go1.26.1
1.26.2
1
ghcr.io/lexfrei/extractedprism:v0.3.0d10417753727
stdlib@go1.26.0
1.26.2
1
ghcr.io/mattn/picoclaw:latest517556c8b144
stdlib@go1.26.0
1.26.2
1
ghcr.io/mondu-ai/gar-credential-provider:latest25090d37afa9
stdlib@go1.26.0
1.26.2
1
ghcr.io/naval-group/butane-operator:v0.1.1-rc285818b510780
stdlib@go1.26.0
1.26.2
1
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--powerpipe:latesta16ab5ca10a7
stdlib@go1.26.1
1.26.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.