CVE-2026-33818

High

Advisory

Published 13 Aug 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.006; 46th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 4,578; of 17,821 indexed, latest versions
Container images: 5,291; deployed by those charts
Fix available: 1 of 2; affected packages

Enforce maximum recursion depth in encoding/asn1

Carried by container images the latest versions of 4,578 of 17,821 indexed charts deploy, on 5,291 images.

Affected package	Affected versions	Fixed in	Images
golang-1.19deb	1.19.8-2	no fix listed	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+191 more	1.25.13	5,291

OSV records: DEBIAN-CVE-2026-33818 GO-2026-5972
Also known as: BIT-golang-2026-33818

Charts affected

4,578 by stars

Chart	Latest	Affected images	Radar Score

Container images carrying it

5,291 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
library/influxdb :2.7	b8d940ca9376	stdlib@go1.18.2	1.25.13	2
library/mariadb :10.8.3	0abf60f81588	stdlib@go1.16.7	1.25.13	2
library/mariadb :10.10	334b315c10e5	stdlib@go1.18.2	1.25.13	2
library/mariadb :12.0.2 :12.0-noble	607835cd628b	stdlib@go1.24.6	1.25.13	2
library/mariadb :11.4	611a2fcc5fa7	stdlib@go1.24.6	1.25.13	2
library/mariadb :10.6	92e50059ea0a	stdlib@go1.24.6	1.25.13	2
library/mariadb :11.3.2	e101f9db3191	stdlib@go1.18.2	1.25.13	2
library/mongo :8.0.20	098862b1339f	stdlib@go1.25.7	1.25.13	2
library/mongo :5.0	41108d183e97	stdlib@go1.25.9	1.25.13	2
library/mongo :7	b096b4cb9269	stdlib@go1.26.5	1.25.13	2
library/mysql :8.2.0	212fe73edca5	stdlib@go1.18.2	1.25.13	2
library/mysql :8.4.2	ac80b6e09e5b	stdlib@go1.18.2	1.25.13	2
library/mysql :9.7.2	b2cf29815e62	stdlib@go1.24.6	1.25.13	2
library/nats :2.9.17-alpine	1a7b320b2942	stdlib@go1.19.9	1.25.13	2
library/nats :2.10.7-alpine	1bcddab51b80	stdlib@go1.21.5	1.25.13	2
library/nats :2.10.5-alpine	85319e5e541b	stdlib@go1.21.4	1.25.13	2
library/nats :2.8.4-alpine	988010f74b61	stdlib@go1.17.10	1.25.13	2
library/postgres :17-bookworm	051f7b7b3abd	stdlib@go1.24.6	1.25.13	2
library/postgres :16.1	09f23e02d766	stdlib@go1.18.2	1.25.13	2
library/postgres :18 :18.6-trixie	10037cee1d5e	stdlib@go1.24.6	1.25.13	2
library/postgres :18.1	1090bc3a8ccf	stdlib@go1.24.6	1.25.13	2
library/postgres :14-alpine	1a916758fce6	stdlib@go1.24.6	1.25.13	2
library/postgres :16-alpine	3c5c8892d184	stdlib@go1.24.6	1.25.13	2
library/postgres :16.2	4aea012537ed	stdlib@go1.18.2	1.25.13	2
library/postgres :18.0	6f3e42ad37de	stdlib@go1.24.6	1.25.13	2
library/postgres :15	9b1d34adbce1	stdlib@go1.24.6	1.25.13	2
library/postgres :9.6	caddd35b05cd	stdlib@go1.16.7	1.25.13	2
library/postgres :16.4	e62fbf9d3e2b	stdlib@go1.18.2	1.25.13	2
library/postgres :17-alpine	f02121de6f74	stdlib@go1.24.6	1.25.13	2
library/postgres :13-alpine	fb9065b6e3e2	stdlib@go1.24.6	1.25.13	2
library/rabbitmq :4.1.0-management	935b3f84c1e4	stdlib@go1.22.2	1.25.13	2
library/rabbitmq :4.3.5-management :4-management :management	ffd1b50c522a	stdlib@go1.22.2	1.25.13	2
library/redis	148bb5411c18	stdlib@go1.18.2	1.25.13	2
library/redis :7.2.3	a7cee7c8178f	stdlib@go1.18.2	1.25.13	2
library/redmine :6.1.3-trixie	f474a901faec	stdlib@go1.24.6	1.25.13	2
library/traefik :v3.7.1	6b9cbca6fac4	stdlib@go1.25.10	1.25.13	2
library/traefik :v2.5	7d5a6ae66572	stdlib@go1.17.6	1.25.13	2
library/traefik :2.2.8	f5af5a5ce17f	stdlib@go1.14.6	1.25.13	2
library/zookeeper :3.9.5	7d0f24ebb67b	stdlib@go1.18.1	1.25.13	2
lightninglabs/lnd :v0.18.3-beta	f86bbec4dfb3	stdlib@go1.22.5	1.25.13	2
linuxserver/cloud9 :latest :version-1.29.2	45c5fe102ff3	stdlib@go1.17.11	1.25.13	2
listmonk/listmonk :v2.1.0	d2eac77ddfad	stdlib@go1.17.6	1.25.13	2
listmonk/listmonk :latest :v6.2.0	f535d59e1499	stdlib@go1.26.1	1.25.13	2
longhornio/longhorn-manager :v1.12.1	83b79f57043f	stdlib@go1.26.5	1.25.13	2
longhornio/longhorn-manager :v1.2.3	dca34321452c	stdlib@go1.14.1	1.25.13	2
longhornio/longhorn-share-manager :v1.12.1	efaf47aeb4e8	stdlib@go1.26.5	1.25.13	2
longhornio/longhorn-ui :v1.12.1	03a3ce6673df	stdlib@go1.25.12	1.25.13	2
louislam/uptime-kuma :2.5.4	917318f9d7be	stdlib@go1.20.5	1.25.13	2
louislam/uptime-kuma :2.3.2	9aeb4e51d038	stdlib@go1.20.5	1.25.13	2
louislam/uptime-kuma :2.5.0	a8610b3b4c38	stdlib@go1.20.5	1.25.13	2