StackRadar

CVE-2026-33810

Unscored

Advisory

Published 7 Apr 2026In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
base score, highest
EPSS
0.003
27th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
141
of 17,781 indexed, latest versions
Container images
130
deployed by those charts
Fix available
1 of 1
affected package

Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509

Carried by container images the latest versions of 141 of 17,781 indexed charts deploy, on 130 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.26.0, go1.26.11.26.2130
OSV records
GO-2026-4866
Also known as
BIT-golang-2026-33810

Charts affected

141 by stars
ChartLatestAffected imagesRadar Score
nri-resource-policy-topology-awarenri-pluginsOfficialVerified publisher0.14.01 of 1See more

nri-resource-policy-topology-aware nri-plugins 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
ghcr.io/containers/nri-plugins/nri-resource-policy-topology-aware:v0.14.0e2443833726a
stdlib@go1.26.0
1.26.2

Open the chart page →

279
podtracepodtraceOfficialVerified publisher0.14.81 of 2See more

podtrace podtrace 0.14.8

1 of the 2 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
alpine/k8s:1.37.0b421c2e9419e
stdlib@go1.26.0
1.26.2

Open the chart page →

589
scaffoldsigstoreVerified publisher0.6.1142 of 15See more

scaffold sigstore 0.6.114

2 of the 15 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
ghcr.io/sigstore/scaffolding/trillian_log_serverdigest-pinned5a878e4e4f03
stdlib@go1.26.0
1.26.2
ghcr.io/sigstore/scaffolding/trillian_log_signerdigest-pinned28c5ff40963f
stdlib@go1.26.0
1.26.2

Open the chart page →

7,710
stornxstornxVerified publisher1.1.11 of 9See more

stornx stornx 1.1.1

1 of the 9 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v3.10.07571a304e67f
stdlib@go1.26.0
1.26.2

Open the chart page →

11,574
supabasesupabse0.8.01 of 11See more

supabase supabse 0.8.0

1 of the 11 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
supabase/postgres:17.6.1.136f371b5f3f2ac
stdlib@go1.26.1
1.26.2

Open the chart page →

18,075
switchboardswitchboardVerified publisher0.7.41 of 1See more

switchboard switchboard 0.7.4

1 of the 1 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
ghcr.io/borchero/switchboard:0.7.454a193b757da
stdlib@go1.26.1
1.26.2

Open the chart page →

839
ingress-nginxwenerme4.15.12 of 2See more

ingress-nginx wenerme 4.15.1

2 of the 2 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.15.1594ceea76b01
stdlib@go1.26.1
1.26.2
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.6.901038e7de14b
stdlib@go1.26.1
1.26.2

Open the chart page →

1,547
gotifyalexvanderberkelVerified publisher0.7.01 of 1See more

gotify alexvanderberkel 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
gotify/server:3.1.0be44495e4609
stdlib@go1.26.0
1.26.2

Open the chart page →

320
anchore-admission-controlleranchore-charts0.8.41 of 2See more

anchore-admission-controller anchore-charts 0.8.4

1 of the 2 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
anchore/kubernetes-admission-controller:v0.8.4077e2a227eea
stdlib@go1.26.0
1.26.2

Open the chart page →

7,852
argocd-bitbucket-proxyargocd-bitbucket-proxy1.1.11 of 1See more

argocd-bitbucket-proxy argocd-bitbucket-proxy 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
ghcr.io/salemgolemugoo/argocd-bitbucket-proxy:latesta72df069095b
stdlib@go1.26.1
1.26.2

Open the chart page →

189
argo-zombiesargo-zombies0.1.521 of 1See more

argo-zombies argo-zombies 0.1.52

1 of the 1 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
ghcr.io/henrywhitaker3/argo-zombies:v0.4.4316c397906c9
stdlib@go1.26.1
1.26.2

Open the chart page →

254
butane-operatorbutane-operatorVerified publisher0.3.01 of 2See more

butane-operator butane-operator 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
ghcr.io/naval-group/butane-operator:v0.1.1-rc285818b510780
stdlib@go1.26.0
1.26.2

Open the chart page →

1,396
caddycaddyVerified publisher0.0.41 of 1See more

caddy caddy 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
library/caddy:2.11.2-alpine834468128c76
stdlib@go1.26.0
1.26.2

Open the chart page →

1,677
ranchercarbide-charts2.15.11 of 2See more

rancher carbide-charts 2.15.1

1 of the 2 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
rancher/rancher:v2.15.15f6c4dc52a05
stdlib@go1.26.1
1.26.2

Open the chart page →

1,456
cert-manager-webhook-pdnscert-manager-webhook-pdns3.2.51 of 1See more

cert-manager-webhook-pdns cert-manager-webhook-pdns 3.2.5

1 of the 1 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
zachomedia/cert-manager-webhook-pdns:v2.5.54940e227a39b
stdlib@go1.26.1
1.26.2

Open the chart page →

1,072
charon-relaycharonOfficialVerified publisher0.8.01 of 2See more

charon-relay charon 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
obolnetwork/charon:v1.10.0278c7e2897b6
stdlib@go1.26.1
1.26.2

Open the chart page →

4,396
dv-podcharonOfficialVerified publisher0.19.11 of 5See more

dv-pod charon 0.19.1

1 of the 5 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
obolnetwork/charon:v1.10.0278c7e2897b6
stdlib@go1.26.1
1.26.2

Open the chart page →

7,405
yas3pcharts-derwitt-devVerified publisher0.3.11 of 1See more

yas3p charts-derwitt-dev 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
denniswitt/yas3p:0.2.488a235619af6
stdlib@go1.26.1
1.26.2

Open the chart page →

736
nextcloud-exporterchristianhuthVerified publisher1.5.01 of 1See more

nextcloud-exporter christianhuth 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
xperimental/nextcloud-exporter:0.9.13e90a3897651
stdlib@go1.26.1
1.26.2

Open the chart page →

194
monitoringcluster-deploy0.3.01 of 11See more

monitoring cluster-deploy 0.3.0

1 of the 11 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v3.10.07571a304e67f
stdlib@go1.26.0
1.26.2

Open the chart page →

8,183
clusterfactoryclusterfactory0.2.01 of 5See more

clusterfactory clusterfactory 0.2.0

1 of the 5 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
gitea/act_runner:0.3.1c2a169c5e998
stdlib@go1.26.1
1.26.2

Open the chart page →

7,168
cluster-network-policy-operatorcluster-network-policy-operatorVerified publisher1.1.01 of 1See more

cluster-network-policy-operator cluster-network-policy-operator 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
ghcr.io/desuuuu/cluster-network-policy-operator:v1.1.0d943d13c5281
stdlib@go1.26.0
1.26.2

Open the chart page →

228
storage-local-pathcnapVerified publisher1.0.11 of 1See more

storage-local-path cnap 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
rancher/local-path-provisioner:v0.0.3534ff0847cc47
stdlib@go1.26.1
1.26.2

Open the chart page →

752
storage-piraeuscnapVerified publisher1.0.11 of 1See more

storage-piraeus cnap 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
quay.io/piraeusdatastore/piraeus-operator:v2.10.5dd68a66332de
stdlib@go1.26.1
1.26.2

Open the chart page →

327
agent-forge-operatorcontainerooVerified publisher1.1.41 of 1See more

agent-forge-operator containeroo 1.1.4

1 of the 1 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
ghcr.io/containeroo/agent-forge-operator:v1.1.48f6d8acd134a
stdlib@go1.26.0
1.26.2

Open the chart page →

256
autovpacontainerooVerified publisher0.4.21 of 1See more

autovpa containeroo 0.4.2

1 of the 1 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
ghcr.io/containeroo/autovpa:v0.0.3425b801d8d1f7
stdlib@go1.26.0
1.26.2

Open the chart page →

298
cert-manager-webhook-bluecatcontainerooVerified publisher1.0.21 of 1See more

cert-manager-webhook-bluecat containeroo 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
ghcr.io/containeroo/cert-manager-webhook-bluecat:latest96f82d5840d4
stdlib@go1.26.0
1.26.2

Open the chart page →

433
filesystem-exportercontainerooVerified publisher1.5.21 of 1See more

filesystem-exporter containeroo 1.5.2

1 of the 1 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
ghcr.io/containeroo/filesystem-exporter:v1.5.2a66121e16d4e
stdlib@go1.26.1
1.26.2

Open the chart page →

1,239
kube-ephemeral-container-exportercontainerooVerified publisher0.2.31 of 1See more

kube-ephemeral-container-exporter containeroo 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
ghcr.io/containeroo/kube-ephemeral-container-exporter:v0.0.14b238f3c58d83
stdlib@go1.26.0
1.26.2

Open the chart page →

298
csghubcsghubVerified publisher2.4.31 of 34See more

csghub csghub 2.4.3

1 of the 34 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
opencsghq/csghub-server:v2.4.0-ee302c9d45d8a8
stdlib@go1.26.0
1.26.2

Open the chart page →

58,897
smokeping-proberdysnixVerified publisher0.3.11 of 1See more

smokeping-prober dysnix 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
superque/smokeping-prober:v0.11.028ca636d1dee
stdlib@go1.26.1
1.26.2

Open the chart page →

471
marblerunedgelesssysVerified publisher1.9.21 of 1See more

marblerun edgelesssys 1.9.2

1 of the 1 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
ghcr.io/edgelesssys/marblerun/coordinator:v1.9.2e589db0d0a2c
stdlib@go1.26.1
1.26.2

Open the chart page →

1,811
contributoorethereum-helm-chartsVerified publisher0.0.21 of 1See more

contributoor ethereum-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
ethpandaops/contributoor:latest1edd4074fd79
stdlib@go1.26.1
1.26.2

Open the chart page →

877
ethereum-address-metrics-exporterethereum-helm-chartsVerified publisher0.2.01 of 1See more

ethereum-address-metrics-exporter ethereum-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
ethpandaops/ethereum-address-metrics-exporter:latest431cd3790ed2
stdlib@go1.26.1
1.26.2

Open the chart page →

544
splitoorethereum-helm-chartsVerified publisher0.0.11 of 1See more

splitoor ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
ethpandaops/splitoor:latest989da6bea4bd
stdlib@go1.26.1
1.26.2

Open the chart page →

1,230
syncoor-serverethereum-helm-chartsVerified publisher0.0.11 of 1See more

syncoor-server ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
ghcr.io/ethpandaops/syncoor:master233aa9808fc7
stdlib@go1.26.0
1.26.2

Open the chart page →

952
extractedprismextractedprismVerified publisher0.2.01 of 1See more

extractedprism extractedprism 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
ghcr.io/lexfrei/extractedprism:v0.3.0d10417753727
stdlib@go1.26.0
1.26.2

Open the chart page →

286
faasnetfaasnet0.0.41 of 5See more

faasnet faasnet 0.0.4

1 of the 5 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
mcr.microsoft.com/mssql/server:latest4bab24f36c1e
stdlib@go1.26.1
1.26.2

Open the chart page →

7,617
kubebenchfairwinds-incubator1.0.51 of 2See more

kubebench fairwinds-incubator 1.0.5

1 of the 2 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
aquasec/kube-bench:v0.15.07a8fa32dce21
stdlib@go1.26.0
1.26.2

Open the chart page →

1,187
farm-observabilityfarm-observabilityOfficialVerified publisher0.27.21 of 18See more

farm-observability farm-observability 0.27.2

1 of the 18 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
quay.io/prometheus/node-exporter:v1.11.1-distroless6112664fd761
stdlib@go1.26.1
1.26.2

Open the chart page →

13,255
cbtgeneral-helm-chartsVerified publisher0.0.51 of 1See more

cbt general-helm-charts 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
ethpandaops/cbt:latest5377ffb3091a
stdlib@go1.26.1
1.26.2

Open the chart page →

564
panda-pulsegeneral-helm-chartsVerified publisher1.0.51 of 1See more

panda-pulse general-helm-charts 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
ethpandaops/panda-pulse:latest7b14deeb416a
stdlib@go1.26.1
1.26.2

Open the chart page →

703
kube-prometheus-stackgpg-dev84.0.02 of 6See more

kube-prometheus-stack gpg-dev 84.0.0

2 of the 6 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
grafana/grafana:13.0.10f86bada30d6
stdlib@go1.26.0
1.26.2
quay.io/prometheus/node-exporter:v1.11.10f422f62c15f
stdlib@go1.26.1
1.26.2

Open the chart page →

4,288
prometheusgpg-dev29.2.11 of 6See more

prometheus gpg-dev 29.2.1

1 of the 6 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
quay.io/prometheus/node-exporter:v1.11.10f422f62c15f
stdlib@go1.26.1
1.26.2

Open the chart page →

3,261
grafana-cloud-onboardinggrafana0.4.71 of 5See more

grafana-cloud-onboarding grafana 0.4.7

1 of the 5 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
quay.io/prometheus/node-exporter:v1.11.10f422f62c15f
stdlib@go1.26.1
1.26.2

Open the chart page →

4,637
routergroundcover1.12.3571 of 7See more

router groundcover 1.12.357

1 of the 7 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
public.ecr.aws/groundcovercom/grafana-groundcover:v0.0.54-grafana11.3.7ee9d973e3952
stdlib@go1.26.1
1.26.2

Open the chart page →

6,009
castopodhelmforgeVerified publisher1.2.71 of 3See more

castopod helmforge 1.2.7

1 of the 3 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
castopod/castopod:1.15.54e4f0440520f
stdlib@go1.26.0
1.26.2

Open the chart page →

9,342
listmonkhelmforgeVerified publisher1.1.141 of 3See more

listmonk helmforge 1.1.14

1 of the 3 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
listmonk/listmonk:v6.2.0f535d59e1499
stdlib@go1.26.1
1.26.2

Open the chart page →

2,839
steampipehelm-steampipeVerified publisher2.4.11 of 1See more

steampipe helm-steampipe 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
ghcr.io/devops-ia/steampipe:v2.4.1a982103d91d3
stdlib@go1.26.1
1.26.2

Open the chart page →

3,124
monitoring-stackict-platformVerified publisher0.4.03 of 13See more

monitoring-stack ict-platform 0.4.0

3 of the 13 container images this version deploys carry CVE-2026-33810.

Container imageDigestPackageFixed in
ghcr.io/grafana/grafana-operator:v5.22.2d45fc24e8f43
stdlib@go1.26.1
1.26.2
ghcr.io/jkroepke/kube-webhook-certgen:1.8.043401e216e89
stdlib@go1.26.1
1.26.2
quay.io/prometheus/node-exporter:v1.11.10f422f62c15f
stdlib@go1.26.1
1.26.2

Open the chart page →

9,573

Container images carrying it

130 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--steampipe:latestc0c8d53df9f3
stdlib@go1.26.1
1.26.2
1
ghcr.io/pocket-id/pocket-id:v2.7.045bdeaf3fcd6
stdlib@go1.26.0
1.26.2
1
ghcr.io/salemgolemugoo/argocd-bitbucket-proxy:latesta72df069095b
stdlib@go1.26.1
1.26.2
1
ghcr.io/shopware/shopware-operator:1.8.187db0eda7a03
stdlib@go1.26.0
1.26.2
1
ghcr.io/siafoundation/renterd:2.9.0e0334f124863
stdlib@go1.26.0
1.26.2
1
ghcr.io/sigstore/sigstore-probers/prober:v1.0.1d1e914e6d6b9
stdlib@go1.26.0
1.26.2
1
ghcr.io/skyhook-io/skyhook-connector:v2.3.23deb8e4b1aaa
stdlib@go1.26.0
1.26.2
1
ghcr.io/slok/sloth:v0.16.0f0f0075b0d45
stdlib@go1.26.1
1.26.2
1
ghcr.io/spiffe/spire-identity-exchange-server:v0.5.0239bc70c1988
stdlib@go1.26.0
1.26.2
1
ghcr.io/squat/generic-device-plugin:0.2.066c8d5c270eb
stdlib@go1.26.1
1.26.2
1
ghcr.io/traefik/hub-manager:v0.45.1d1cff2560c67
stdlib@go1.26.0
1.26.2
1
ghcr.io/vojtechpastyrik/muthur:0.10.0b5a06a6e13b9
stdlib@go1.26.1
1.26.2
1
ghcr.io/vojtechpastyrik/muthur-collector:0.11.00a580fe3a032
stdlib@go1.26.1
1.26.2
1
mcr.microsoft.com/mssql/server:latest4bab24f36c1e
stdlib@go1.26.1
1.26.2
1
mcr.microsoft.com/mssql/server:2022-latestba4c8329f48f
stdlib@go1.26.1
1.26.2
1
public.ecr.aws/csi-components/csi-node-driver-registrar:v2.16.0-eksbuild.3592d7034d6c7
stdlib@go1.26.1
1.26.2
1
public.ecr.aws/csi-components/livenessprobe:v2.18.0-eksbuild.38e307f4e5820
stdlib@go1.26.1
1.26.2
1
public.ecr.aws/groundcovercom/grafana-groundcover:v0.0.54-grafana11.3.7ee9d973e3952
stdlib@go1.26.1
1.26.2
1
quay.io/aerokube/moon:2.8.1e618a3ed6436
stdlib@go1.26.1
1.26.2
1
quay.io/aerokube/moon-conf:2.8.11ef2b53c98fd
stdlib@go1.26.1
1.26.2
1
quay.io/aerokube/moon-ui:2.8.156425d4f8b9c
stdlib@go1.26.1
1.26.2
1
quay.io/go-skynet/local-ai:latestd78cd113b2bc
stdlib@go1.26.0
1.26.2
1
quay.io/maxiv/mortalgpu:1.3.7e1c5c194bbf0
stdlib@go1.26.0
1.26.2
1
quay.io/nmstate/kubernetes-nmstate-operator:v0.87.04dce694f01ea
stdlib@go1.26.0
1.26.2
1
quay.io/nuclio/dashboard:1.17.8-amd64b5f5bd4efbee
stdlib@go1.26.1
1.26.2
1
quay.io/piraeusdatastore/piraeus-operator:v2.10.5dd68a66332de
stdlib@go1.26.1
1.26.2
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-backend:1.0.31c7afac3446d6
stdlib@go1.26.1
1.26.2
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
stdlib@go1.26.1
1.26.2
1
registry.k8s.io/descheduler/descheduler:v0.36.07ca92c0a7b4f
stdlib@go1.26.0
1.26.2
1
registry.k8s.io/kwok/kwok:v0.8.06d25aa8fbdfe
stdlib@go1.26.0
1.26.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.