Container image	Digest	Package	Fixed in
quay.io/minio/mc :RELEASE.2023-01-28T20-29-38Z	ad34abeba912	stdlib@go1.19.4	1.25.13
quay.io/minio/minio :RELEASE.2023-02-10T18-48-39Z	a0a002cb113c	stdlib@go1.19.4	1.25.13

Open the chart page →

7,613

evi-vaultintel

3.0.3

2 of 2 See more

evi-vault intel 3.0.3

2 of the 2 container images this version deploys carry CVE-2026-33818.

Container image	Digest	Package	Fixed in
hashicorp/vault :1.12.1	8de4d5f31b38	stdlib@go1.19.2	1.25.13
hashicorp/vault-k8s :1.1.0	844337076b72	stdlib@go1.19.3	1.25.13

Open the chart page →

4,487

intel-gaudi-resource-driverintel

0.3.0

1 of 1 See more

intel-gaudi-resource-driver intel 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-33818.

Container image	Digest	Package	Fixed in
intel/intel-gaudi-resource-driver :v0.3.0	ac758c14c2de	stdlib@go1.23.4	1.25.13

Open the chart page →

565

intel-qat-resource-driverintel

0.1.0

1 of 1 See more

intel-qat-resource-driver intel 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33818.

Container image	Digest	Package	Fixed in
intel/intel-qat-resource-driver :v0.1.0	ac7616986a2b	stdlib@go1.22.4	1.25.13

Open the chart page →

609

kesintel

0.8.3

1 of 1 See more

3,578

multimodal-data-visualizationintel

3.0.0

1 of 2 See more

multimodal-data-visualization intel 3.0.0

1 of the 2 container images this version deploys carry CVE-2026-33818.

Container image	Digest	Package	Fixed in
intel/multimodal-data-visualization :3.0	3426deb77337	stdlib@go1.17.11	1.25.13

Open the chart page →

77,320

tcs-issuerintel

0.5.0

1 of 2 See more

tcs-issuer intel 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-33818.

Container image	Digest	Package	Fixed in
intel/trusted-certificate-issuer :0.5.0	591a9db4a427	stdlib@go1.19.3	1.25.13

Open the chart page →

6,010

vaultintel

0.8.1

2 of 2 See more

vault intel 0.8.1

2 of the 2 container images this version deploys carry CVE-2026-33818.

Container image	Digest	Package	Fixed in
hashicorp/vault :1.12.1	8de4d5f31b38	stdlib@go1.19.2	1.25.13
hashicorp/vault-k8s :1.1.0	844337076b72	stdlib@go1.19.3	1.25.13

Open the chart page →

4,487

gravity-initinvisibl

1.0.9

1 of 1 See more

gravity-init invisibl 1.0.9

1 of the 1 container images this version deploys carry CVE-2026-33818.

Container image	Digest	Package	Fixed in
invisibl/gravity-init :v1.0.9	1a970f84178b	stdlib@go1.17.12	1.25.13

Open the chart page →

2,007

identity-managerinvisibl

1.0.0

1 of 1 See more

identity-manager invisibl 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-33818.

Container image	Digest	Package	Fixed in
invisibl/identity-manager :1.0.0	1029f4fe20eb	stdlib@go1.17.11	1.25.13

Open the chart page →

2,163

identity-manager-demoinvisibl

0.1.1

1 of 1 See more

identity-manager-demo invisibl 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-33818.

Container image	Digest	Package	Fixed in
invisibl/identity-manager-demo :v1.0.0	cf5400cb935a	stdlib@go1.19.2	1.25.13

Open the chart page →

1,006

karpenteriomete

0.19.3

1 of 1 See more

karpenter iomete 0.19.3

1 of the 1 container images this version deploys carry CVE-2026-33818.

Container image	Digest	Package	Fixed in
public.ecr.aws/karpenter/controller :v0.19.3	f0e5ab60b2df	stdlib@go1.19.3	1.25.13

Open the chart page →

1,556

server-monitoringiserversupport-helm--charts

1.0.0

2 of 2 See more

server-monitoring iserversupport-helm--charts 1.0.0

2 of the 2 container images this version deploys carry CVE-2026-33818.

Container image	Digest	Package	Fixed in
prom/node-exporter :v1.10.2	3ac34ce007ac	stdlib@go1.25.3	1.25.13
prom/prometheus :v3.8.0	d936808bdea5	stdlib@go1.25.4	1.25.13

Open the chart page →

1,331

istio-aws-private-ingress-customizedistio-aws-private-ingress-customized

1.0.0

1 of 1 See more

istio-aws-private-ingress-customized istio-aws-private-ingress-customized 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-33818.

Container image	Digest	Package	Fixed in
istio/proxyv2 :1.18.0	757d28c24100	stdlib@go1.20.4	1.25.13

Open the chart page →

5,590

istio-azure-private-ingress-customizedistio-azure-private-ingress-customized

1.0.0

1 of 1 See more

istio-azure-private-ingress-customized istio-azure-private-ingress-customized 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-33818.

Container image	Digest	Package	Fixed in
istio/proxyv2 :1.18.0	757d28c24100	stdlib@go1.20.4	1.25.13

Open the chart page →

5,590

istio-ratelimit-operatoristio-ratelimit-operator

2.16.1

1 of 1 See more

istio-ratelimit-operator istio-ratelimit-operator 2.16.1

1 of the 1 container images this version deploys carry CVE-2026-33818.

Container image	Digest	Package	Fixed in
zufardhiyaulhaq/istio-ratelimit-operator :v2.15.0	692cfc9d6614	stdlib@go1.19.13	1.25.13

Open the chart page →

746

appswitcher-serverit-at-m

2.0.2

1 of 1 See more

appswitcher-server it-at-m 2.0.2

1 of the 1 container images this version deploys carry CVE-2026-33818.

Container image	Digest	Package	Fixed in
ghcr.io/it-at-m/appswitcher-server :1.3.0	10006bc0f309	stdlib@go1.24.3	1.25.13

Open the chart page →

3,819

daveit-at-m

0.2.16

1 of 11 See more

dave it-at-m 0.2.16

1 of the 11 container images this version deploys carry CVE-2026-33818.

Container image	Digest	Package	Fixed in
bitnamilegacy/elasticsearch :9.1.2-debian-12-r0	00176a47afa0	stdlib@go1.24.6	1.25.13

Open the chart page →

12,337

hetzner-dyndnsitsmethemojo

1.4.0

1 of 1 See more

hetzner-dyndns itsmethemojo 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-33818.

Container image	Digest	Package	Fixed in
hashicorp/terraform :1.9.7	b77efab1a448	stdlib@go1.22.7	1.25.13

Open the chart page →

1,853

thehiveittrident-oss

0.1.0

2 of 6 See more

thehive ittrident-oss 0.1.0

2 of the 6 container images this version deploys carry CVE-2026-33818.

Container image	Digest	Package	Fixed in
library/cassandra :4.0	093ee8ee5eb2	stdlib@go1.24.6	1.25.13
minio/minio :latest	14cea493d9a3	stdlib@go1.24.6	1.25.13

Open the chart page →

6,331

jaasjaas

2026.6.15+101354

1 of 1 See more

jaas jaas 2026.6.15+101354

1 of the 1 container images this version deploys carry CVE-2026-33818.

Container image	Digest	Package	Fixed in
ghcr.io/metio/jaas :2026.6.15	e28772028e56	stdlib@go1.26.4	1.25.13

Open the chart page →

360

adguard-homejacobcolvin

0.4.0

1 of 2 See more

adguard-home jacobcolvin 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-33818.

Container image	Digest	Package	Fixed in
adguard/adguardhome :v0.107.38	43ec119419a9	stdlib@go1.20.8	1.25.13

Open the chart page →

1,605

inlets-clientjacobcolvin

0.1.2

1 of 1 See more

inlets-client jacobcolvin 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-33818.

Container image	Digest	Package	Fixed in
ghcr.io/cubed-it/inlets :4.0.0	f02325f099bc	stdlib@go1.13.15	1.25.13

Open the chart page →

1,754

inlets-serverjacobcolvin

0.1.1

1 of 1 See more

inlets-server jacobcolvin 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-33818.

Container image	Digest	Package	Fixed in
ghcr.io/cubed-it/inlets :4.0.0	f02325f099bc	stdlib@go1.13.15	1.25.13

Open the chart page →

1,754

opencloudjacobcolvin

0.2.3

3 of 13 See more

opencloud jacobcolvin 0.2.3

3 of the 13 container images this version deploys carry CVE-2026-33818.

Container image	Digest	Package	Fixed in
library/postgres :alpine	d3e1620b530c	stdlib@go1.24.6	1.25.13
minio/minio :latest	14cea493d9a3	stdlib@go1.24.6	1.25.13
opencloudeu/opencloud-rolling :2.1.0	f9634bb04905	stdlib@go1.24.2	1.25.13

Open the chart page →

45,468

osrs-ge-exporterjacobcolvin

0.4.0

1 of 1 See more

osrs-ge-exporter jacobcolvin 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-33818.

Container image	Digest	Package	Fixed in
macropower/osrs_ge_exporter :v0.3	c77ab5ea955c	stdlib@go1.21.0	1.25.13

Open the chart page →

608

rclonejacobcolvin

1.0.1

1 of 1 See more

rclone jacobcolvin 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-33818.

Container image	Digest	Package	Fixed in
rclone/rclone :1.63.0	08e1af3c8814	stdlib@go1.20.5	1.25.13

Open the chart page →

2,150

twitch-predictions-recorderjacobcolvin

0.1.0

1 of 1 See more

twitch-predictions-recorder jacobcolvin 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33818.

Container image	Digest	Package	Fixed in
macropower/twitch_predictions_recorder :v0.2	1e9c4fb89787	stdlib@go1.19.2	1.25.13

Open the chart page →

2,670

wakatime-exporterjacobcolvin

0.1.1

1 of 1 See more

wakatime-exporter jacobcolvin 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-33818.

Container image	Digest	Package	Fixed in
macropower/wakatime-exporter :0.1.0	dbb05debb785	stdlib@go1.14.6	1.25.13

Open the chart page →

1,314

wireguard-operatorjacobcolvin

0.2.0

1 of 2 See more

wireguard-operator jacobcolvin 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-33818.

Container image	Digest	Package	Fixed in
ghcr.io/jodevsa/wireguard-operator/manager :v2.0.28	39412bdd403b	stdlib@go1.22.2	1.25.13

Open the chart page →

840

koptimizejaconi

0.5.4

2 of 2 See more

koptimize jaconi 0.5.4

2 of the 2 container images this version deploys carry CVE-2026-33818.

Container image	Digest	Package	Fixed in
alpine/k8s :1.27.3	21b24e6bf801	stdlib@go1.20.4	1.25.13
ghcr.io/jaconi-io/koptimize :1.2.5	aca1bbd609b6	stdlib@go1.20.7	1.25.13

Open the chart page →

5,738

mini-infrajaeki

0.1.0

1 of 4 See more

mini-infra jaeki 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-33818.

Container image	Digest	Package	Fixed in
quay.io/metallb/controller :v0.13.10	1b33357b3595	stdlib@go1.19.5	1.25.13

Open the chart page →

1,746

todo-operatorjakuboskera

0.1.1

1 of 1 See more

todo-operator jakuboskera 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-33818.

Container image	Digest	Package	Fixed in
jakuboskera/todo-operator :v0.1.0	a305b8ce5bff	stdlib@go1.25.3	1.25.13

Open the chart page →

304

deconzjanip81-helm-charts

0.1.1

1 of 1 See more

deconz janip81-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-33818.

Container image	Digest	Package	Fixed in
deconzcommunity/deconz :2.29.2	062de2362641	stdlib@go1.19.8	1.25.13

Open the chart page →

10,922

ghostjanip81-helm-charts

0.1.2

1 of 1 See more

ghost janip81-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-33818.

Container image	Digest	Package	Fixed in
library/ghost :6.37.0	1ef2e532ca4d	stdlib@go1.23.12	1.25.13

Open the chart page →

3,496

n8njanip81-helm-charts

0.1.4

1 of 1 See more

n8n janip81-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-33818.

Container image	Digest	Package	Fixed in
n8nio/n8n :1.86.0	8b39ed5a2de9	stdlib@go1.24.0	1.25.13

Open the chart page →

5,981

unifi-network-applicationjanip81-helm-charts

0.2.9

1 of 3 See more

unifi-network-application janip81-helm-charts 0.2.9

1 of the 3 container images this version deploys carry CVE-2026-33818.

Container image	Digest	Package	Fixed in
library/mongo :7.0	b6421fd6d1c5	stdlib@go1.26.5	1.25.13

Open the chart page →

2,196

janus-shieldjanus-shield

1.0.0

1 of 2 See more

janus-shield janus-shield 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-33818.

Container image	Digest	Package	Fixed in
quay.io/cilium/tetragon :v1.1.0	96fac2482898	stdlib@go1.22.2	1.25.13

Open the chart page →

2,435

javascriptweeklyjavascriptweekly

2.1.0

1 of 1 See more

javascriptweekly javascriptweekly 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-33818.

Container image	Digest	Package	Fixed in
zufardhiyaulhaq/javascriptweekly :v2.1.0	86424bd0b2a4	stdlib@go1.17.13	1.25.13

Open the chart page →

1,237

sql-exporterjdstone

0.2.1

1 of 1 See more

sql-exporter jdstone 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-33818.

Container image	Digest	Package	Fixed in
burningalchemist/sql_exporter :0.16.0	b8e4757c7def	stdlib@go1.23.2	1.25.13

Open the chart page →

886

newtjeffresc

0.2.1

1 of 1 See more

1,111

athens-proxyjenkins-x

0.2.2

1 of 2 See more

athens-proxy jenkins-x 0.2.2

1 of the 2 container images this version deploys carry CVE-2026-33818.

Container image	Digest	Package	Fixed in
jaegertracing/all-in-one :latest	ab6f1a1f0fb4	stdlib@go1.25.4	1.25.13

Open the chart page →

1,352

jx-app-athensjenkins-x

0.0.18

1 of 1 See more

jx-app-athens jenkins-x 0.0.18

1 of the 1 container images this version deploys carry CVE-2026-33818.

Container image	Digest	Package	Fixed in
gomods/athens :v0.8.1	d714c7ff0231	stdlib@go1.13.4	1.25.13

Open the chart page →

4,232

jx-app-datadogjenkins-x

0.0.10

1 of 2 See more

jx-app-datadog jenkins-x 0.0.10

1 of the 2 container images this version deploys carry CVE-2026-33818.

Container image	Digest	Package	Fixed in
datadog/agent :6	aad9994de6a7	stdlib@go1.21.11	1.25.13

Open the chart page →

4,087

jx-app-flaggerjenkins-x

0.0.5

2 of 2 See more

jx-app-flagger jenkins-x 0.0.5

2 of the 2 container images this version deploys carry CVE-2026-33818.

Container image	Digest	Package	Fixed in
grafana/grafana :6.5.1	befcd84da2c1	stdlib@go1.13.1	1.25.13
weaveworks/flagger :1.0.0-rc.5	174307de1b36	stdlib@go1.14.2	1.25.13

Open the chart page →

6,035

jx-app-jenkinsjenkins-x

0.0.15

1 of 2 See more

jx-app-jenkins jenkins-x 0.0.15

1 of the 2 container images this version deploys carry CVE-2026-33818.

Container image	Digest	Package	Fixed in
jenkins/jenkins :lts	c1e4c349365f	stdlib@go1.25.3	1.25.13

Open the chart page →

2,517

knative-servingjenkins-x

0.19.12

4 of 4 See more

knative-serving jenkins-x 0.19.12

4 of the 4 container images this version deploys carry CVE-2026-33818.

Container image	Digest	Package	Fixed in
gcr.io/knative-releases/knative.dev/serving/cmd/activatordigest-pinned	1e3db4f2eeed	stdlib@go1.14.10	1.25.13
gcr.io/knative-releases/knative.dev/serving/cmd/autoscalerdigest-pinned	db6ceff2aab4	stdlib@go1.14.10	1.25.13
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinned	b2cd45b8a8a4	stdlib@go1.14.10	1.25.13
gcr.io/knative-releases/knative.dev/serving/cmd/webhookdigest-pinned	d27b4495ccc3	stdlib@go1.14.10	1.25.13

Open the chart page →

9,727

Container images carrying it

5,243 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
otel/opentelemetry-collector-k8s :0.111.0	32b3c8296dcc	stdlib@go1.23.2	1.25.13	2
outlinewiki/outline :0.69.1	d060dcd8f9aa	stdlib@go1.19.4	1.25.13	2
passbolt/passbolt :3.4.0-ce-non-root	655547e17263	stdlib@go1.14.4	1.25.13	2
percona/everest-helmtools :0.0.1	904458d04a18	stdlib@go1.24.6	1.25.13	2
pgautoupgrade/pgautoupgrade :18-alpine	48b448825656	stdlib@go1.24.6	1.25.13	2
pgvector/pgvector :0.8.5-pg18-trixie	9d2e61c7352b	stdlib@go1.24.6	1.25.13	2
pgvector/pgvector :0.8.6-pg16-bookworm :pg16	ccc6e83d6e35	stdlib@go1.24.6	1.25.13	2
phntom/kochi :1.1.3	3b82358bd56e	stdlib@go1.15.5	1.25.13	2
place1/wg-access-server :v0.4.6	2b2f3ea80ed6	stdlib@go1.13.8	1.25.13	2
polyaxon/polyaxon-operator :2.17.0	7664c1cebb9d	stdlib@go1.24.13	1.25.13	2
postgis/postgis :15-3.3	a2fc46b52819	stdlib@go1.18.2	1.25.13	2
pottava/s3-proxy :2.0	20a0bcb15f76	stdlib@go1.13.7	1.25.13	2
prom/blackbox-exporter :v0.18.0	1ffc3f109eb3	stdlib@go1.15.2	1.25.13	2
prom/graphite-exporter :latest	c1a266f63a84	stdlib@go1.26.5	1.25.13	2
prom/prometheus :v2.17.2	42d2395cd719	stdlib@go1.13.10	1.25.13	2
prom/prometheus :v2.52.0	5c435642ca4d	stdlib@go1.22.3	1.25.13	2
prom/prometheus :v2.37.9	8176adea328e	stdlib@go1.19.11	1.25.13	2
prom/prometheus :v2.48.1	a67e5e402ff5	stdlib@go1.21.5	1.25.13	2
prom/prometheus :v2.21.0	d43417c260e5	stdlib@go1.15.2	1.25.13	2
prom/pushgateway :v1.0.1	a5df60347882	stdlib@go1.13.5	1.25.13	2
prom/pushgateway :v1.3.0	c0d39b8d4cfe	stdlib@go1.15.2	1.25.13	2
qingcloud/cloud-controller-manager :v1.4.12	10f66b5df886	stdlib@go1.18.2	1.25.13	2
qingcloud/hostnic-plus :v1.0.3	4cd5366a9f51	stdlib@go1.16.3	1.25.13	2
qmcgaw/ddns-updater :2.10.0 :v2.10.0	3e2aa558946b	stdlib@go1.26.2	1.25.13	2
rajnandan1/kener :3.2.19	30407afca731	stdlib@go1.20.7	1.25.13	2
rancher/k3s :v1.26.0-k3s1	9380f5dbae9a	stdlib@go1.19.4	1.25.13	2
rancher/kine :v0.11.4	12889bbcd1e8	stdlib@go1.21.5	1.25.13	2
rancher/kubectl :v1.36.2	06c7a7a97727	stdlib@go1.26.4	1.25.13	2
rancher/local-path-provisioner :v0.0.35	34ff0847cc47	stdlib@go1.26.1	1.25.13	2
rancher/local-path-provisioner :v0.0.29	9bebefa0b908	stdlib@go1.22.5	1.25.13	2
rancher/system-upgrade-controller :v0.20.1	aaf4dbf64057	stdlib@go1.26.5	1.25.13	2
rclone/rclone :1.68	74c51b8817e5	stdlib@go1.23.3	1.25.13	2
ribbybibby/ssl-exporter :2.4.2	718abe7f5e79	stdlib@go1.18.3	1.25.13	2
rookout/controller :latest	4451a6f6b8ec	stdlib@go1.20.5	1.25.13	2
rookout/data-on-prem :latest	51c0fce64467	stdlib@go1.20.5	1.25.13	2
rss3/op-batcher :a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8a	dae8a5bdd7a6	stdlib@go1.21.3	1.25.13	2
rss3/op-proposer :a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8a	a4059dd32c48	stdlib@go1.21.3	1.25.13	2
samcm/ethereum-metrics-exporter :0.29.2 :latest	91a2d9a015c1	stdlib@go1.25.8	1.25.13	2
scaleway/cert-manager-webhook-scaleway :v0.0.1	dcc14608d000	stdlib@go1.15.2	1.25.13	2
shlinkio/shlink :5.1.6 :stable	666cc24edf72	stdlib@go1.26.4	1.25.13	2
sikalabs/hello-world-server :latest	5f49bf889a64	stdlib@go1.26.2	1.25.13	2
squareup/ghostunnel :v1.5.2	70f4cf270425	stdlib@go1.13.4	1.25.13	2
starrocks/operator :v1.11.7	8c20435a7579	stdlib@go1.22.12	1.25.13	2
statping/statping :v0.90.74	e874da513a5c	stdlib@go1.14.13	1.25.13	2
streamnative/apache-pulsar-grafana-dashboard-k8s :0.1.2	0e6d7aa3ef32	stdlib@go1.20.4	1.25.13	2
syncthing/syncthing :2.1.1	775c4aac4862	stdlib@go1.26.3	1.25.13	2
taigaio/taiga-back :latest	4beed8f62c9f	stdlib@go1.24.4	1.25.13	2
taigaio/taiga-protected :latest	fd4568a97a59	stdlib@go1.24.4	1.25.13	2
temporalio/server :1.22.4	c0a44c26397b	stdlib@go1.20.11	1.25.13	2
temporalio/ui :2.16.2	af9c9349708f	stdlib@go1.20.5	1.25.13	2