StackRadar

CVE-2026-39820

High

Advisory

Published 7 May 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.008
54th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,929
of 17,797 indexed, latest versions
Container images
4,519
deployed by those charts
Fix available
1 of 2
affected packages

Quadratic string concatentation in consumeComment in net/mail

Carried by container images the latest versions of 3,929 of 17,797 indexed charts deploy, on 4,519 images.

Affected packageAffected versionsFixed inImages
golang-1.19deb1.19.8-2no fix listed1
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+179 more1.25.104,519
OSV records
DEBIAN-CVE-2026-39820GO-2026-4986
Also known as
BIT-golang-2026-39820

Charts affected

3,929 by stars
ChartLatestAffected imagesRadar Score
jenkinswebencryptor1.9.181 of 1See more

jenkins webencryptor 1.9.18

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
stdlib@go1.25.3
1.25.10

Open the chart page →

2,498
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
library/mongo:4.44be76f674fc4
stdlib@go1.21.12
1.25.10

Open the chart page →

28,729
generic-webhookwebhooks0.1.11 of 1See more

generic-webhook webhooks 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
ghcr.io/thecatlady/webhook:2.8.0f04718704dab
stdlib@go1.20.1
1.25.10

Open the chart page →

2,031
webresourcecataloguswebresourcecatalogus1.1.01 of 4See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/webresourcecatalogus-php:latest8f1bbd5cda85
stdlib@go1.13.10
1.25.10

Open the chart page →

7,562
ambassadorwenerme6.9.51 of 2See more

ambassador wenerme 6.9.5

1 of the 2 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
datawire/aes:1.14.48588eafe6862
stdlib@go1.15
1.25.10

Open the chart page →

4,093
apisixwenerme2.17.01 of 3See more

apisix wenerme 2.17.0

1 of the 3 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
bitnamilegacy/etcd:latest99b408c15272
stdlib@go1.23.10
1.25.10

Open the chart page →

3,136
argo-eventswenerme2.4.271 of 1See more

argo-events wenerme 2.4.27

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
quay.io/argoproj/argo-events:v1.9.11fa07b2c9ece6
stdlib@go1.25.6
1.25.10

Open the chart page →

976
athens-proxywenerme0.5.22 of 2See more

athens-proxy wenerme 0.5.2

2 of the 2 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
gomods/athens:v0.11.0efb811df7844
stdlib@go1.13.10
1.25.10
jaegertracing/all-in-one:latestab6f1a1f0fb4
stdlib@go1.25.4
1.25.10

Open the chart page →

4,999
cadencewenerme0.23.02 of 5See more

cadence wenerme 0.23.0

2 of the 5 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
ubercadence/server:0.23.22ac5491d13bb
stdlib@go1.13.6
1.25.10
ghcr.io/banzaicloud/tcheck:latest0147d87c2019
stdlib@go1.15.2
1.25.10

Open the chart page →

10,147
emissary-ingresswenerme8.12.21 of 2See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
datawire/emissary:3.12.21f67a1292d2a
stdlib@go1.22.4
1.25.10

Open the chart page →

10,879
filebrowserwenerme1.0.01 of 1See more

filebrowser wenerme 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
filebrowser/filebrowser:v2.13.0c5d0a75a0041
stdlib@go1.16.2
1.25.10

Open the chart page →

3,174
frpcwenerme1.0.11 of 1See more

frpc wenerme 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
wener/frpc:v0.37.0cc9fd4da44c0
stdlib@go1.17.3
1.25.10

Open the chart page →

3,359
giteawenerme12.7.02 of 4See more

gitea wenerme 12.7.0

2 of the 4 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
bitnamilegacy/pgpool:4.6.3-debian-12-r0d3bf3910f148
stdlib@go1.25.0
1.25.10
bitnamilegacy/valkey-cluster:8.1.3-debian-12-r332869e769b7e
stdlib@go1.24.6
1.25.10

Open the chart page →

8,915
haproxy-ingresswenerme0.16.11 of 1See more

haproxy-ingress wenerme 0.16.1

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
quay.io/jcmoraisjr/haproxy-ingress:v0.16.16fd744191ef6
stdlib@go1.25.9
1.25.10

Open the chart page →

794
juicefs-csi-driverwenerme0.33.03 of 5See more

juicefs-csi-driver wenerme 0.33.0

3 of the 5 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.9.0cd21e19cd8bb
stdlib@go1.20.5
1.25.10
registry.k8s.io/sig-storage/csi-resizer:v1.9.0f1f352df9787
stdlib@go1.20.5
1.25.10
registry.k8s.io/sig-storage/livenessprobe:v2.12.05baeb4a6d7d5
stdlib@go1.21.5
1.25.10

Open the chart page →

8,944
kubernetes-dashboardwenerme7.14.04 of 5See more

kubernetes-dashboard wenerme 7.14.0

4 of the 5 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
kubernetesui/dashboard-api:1.14.096a702cfd339
stdlib@go1.23.12
1.25.10
kubernetesui/dashboard-auth:1.4.053e9917898bf
stdlib@go1.23.12
1.25.10
kubernetesui/dashboard-metrics-scraper:1.2.25154b68252bd
stdlib@go1.23.4
1.25.10
kubernetesui/dashboard-web:1.7.0cc7c31bd2d84
stdlib@go1.23.9
1.25.10

Open the chart page →

3,536
logging-operatorwenerme3.17.101 of 1See more

logging-operator wenerme 3.17.10

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
ghcr.io/banzaicloud/logging-operator:3.17.101b530cf7c07f
stdlib@go1.17.13
1.25.10

Open the chart page →

1,646
longhornwenerme1.2.31 of 2See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.2.3dca34321452c
stdlib@go1.14.1
1.25.10

Open the chart page →

15,310
miniowenerme8.0.101 of 1See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
stdlib@go1.15.7
1.25.10

Open the chart page →

6,922
minio-standalonewenerme1.0.21 of 1See more

minio-standalone wenerme 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2022-01-04T07-41-07Z1484c87239ea
stdlib@go1.17.5
1.25.10

Open the chart page →

6,145
nats-account-serverwenerme0.8.11 of 1See more

nats-account-server wenerme 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
natsio/nats-account-server:1.0.0a3381560aab6
stdlib@go1.16.6
1.25.10

Open the chart page →

2,634
nfs-subdir-external-provisionerwenerme4.0.181 of 1See more

nfs-subdir-external-provisioner wenerme 4.0.18

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner:v4.0.263d5e04551ec
stdlib@go1.15
1.25.10

Open the chart page →

2,745
openebswenerme3.10.03 of 3See more

openebs wenerme 3.10.0

3 of the 3 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
openebs/node-disk-manager:2.1.0f6c18b0f8c8a
stdlib@go1.19.3
1.25.10
openebs/node-disk-operator:2.1.06afe2123c457
stdlib@go1.19.3
1.25.10
openebs/provisioner-localpv:3.5.0aea39e49bb97
stdlib@go1.19.13
1.25.10

Open the chart page →

10,602
prometheus-snmp-exporterwenerme9.18.01 of 1See more

prometheus-snmp-exporter wenerme 9.18.0

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
quay.io/prometheus/snmp-exporter:v0.30.1e5fd5e8b43ac
stdlib@go1.25.5
1.25.10

Open the chart page →

509
prometheus-statsd-exporterwenerme1.0.01 of 1See more

prometheus-statsd-exporter wenerme 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
prom/statsd-exporter:v0.28.04e7a1f00b9b2
stdlib@go1.23.2
1.25.10

Open the chart page →

782
rancherwenerme2.15.11 of 2See more

rancher wenerme 2.15.1

1 of the 2 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
rancher/rancher:v2.15.15f6c4dc52a05
stdlib@go1.26.1
1.25.10

Open the chart page →

1,487
temporalwenerme0.15.16 of 13See more

temporal wenerme 0.15.1

6 of the 13 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
grafana/grafana:6.7.11ff3999e0fc0
stdlib@go1.13.4
1.25.10
prom/alertmanager:v0.20.07e4e9f7a0954
stdlib@go1.13.5
1.25.10
prom/prometheus:v2.16.0e4ca62c0d62f
stdlib@go1.13.8
1.25.10
prom/pushgateway:v1.0.1a5df60347882
stdlib@go1.13.5
1.25.10
temporalio/admin-tools:1.15.135034611d981
stdlib@go1.17.6
1.25.10
temporalio/server:1.15.1e26758f5a1bf
stdlib@go1.17.6
1.25.10

Open the chart page →

22,707
traefikwenerme9.1.11 of 1See more

traefik wenerme 9.1.1

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
library/traefik:2.2.8f5af5a5ce17f
stdlib@go1.14.6
1.25.10

Open the chart page →

3,378
victoria-metrics-k8s-stackwenerme0.92.11 of 7See more

victoria-metrics-k8s-stack wenerme 0.92.1

1 of the 7 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
quay.io/prometheus/node-exporter:v1.11.10f422f62c15f
stdlib@go1.26.1
1.25.10

Open the chart page →

1,915
wexa-studiowexa-studio1.2.07 of 15See more

wexa-studio wexa-studio 1.2.0

7 of the 15 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
hashicorp/vault:1.15.40b01ed3924e6
stdlib@go1.21.4
1.25.10
library/postgres:15-alpinefe0737ba566a
stdlib@go1.24.6
1.25.10
minio/minio:RELEASE.2024-01-16T16-07-38Z4c4a4876193f
stdlib@go1.21.6
1.25.10
temporalio/admin-tools:1.29.1-tctl-1.18.4-cli-1.5.0a3a52e6ca122
stdlib@go1.25.0
1.25.10
temporalio/server:1.29.1c1e3326b2ce1
stdlib@go1.25.0
1.25.10
temporalio/ui:2.44.00b36e00aad30
stdlib@go1.24.11
1.25.10
quay.io/mongodb/mongodb-kubernetes-operator:0.9.05ee4bd681085
stdlib@go1.21.4
1.25.10

Open the chart page →

15,056
whereaboutswhereaboutsVerified publisher0.3.01 of 1See more

whereabouts whereabouts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4f279fd7dc112
stdlib@go1.25.6
1.25.10

Open the chart page →

618
wikiwikijs3.0.01 of 2See more

wiki wikijs 3.0.0

1 of the 2 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
stdlib@go1.24.6
1.25.10

Open the chart page →

5,497
ceph-csi-cephfswikimedia0.1.85 of 5See more

ceph-csi-cephfs wikimedia 0.1.8

5 of the 5 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
gcr.io/k8s-staging-sig-storage/csi-provisioner:v3.2.14ad5fcdbe7e9
stdlib@go1.18
1.25.10
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
stdlib@go1.18.5
1.25.10
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.5.10103eee7c35e
stdlib@go1.17.3
1.25.10
registry.k8s.io/sig-storage/csi-resizer:v1.5.08f7520bd957e
stdlib@go1.18
1.25.10
registry.k8s.io/sig-storage/csi-snapshotter:v6.0.1ad16874e2140
stdlib@go1.18
1.25.10

Open the chart page →

10,321
ceph-csi-rbdwikimedia0.1.136 of 6See more

ceph-csi-rbd wikimedia 0.1.13

6 of the 6 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
gcr.io/k8s-staging-sig-storage/csi-provisioner:v3.2.14ad5fcdbe7e9
stdlib@go1.18
1.25.10
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
stdlib@go1.18.5
1.25.10
registry.k8s.io/sig-storage/csi-attacher:v3.5.0dd245051317e
stdlib@go1.18
1.25.10
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.5.10103eee7c35e
stdlib@go1.17.3
1.25.10
registry.k8s.io/sig-storage/csi-resizer:v1.5.08f7520bd957e
stdlib@go1.18
1.25.10
registry.k8s.io/sig-storage/csi-snapshotter:v6.0.1ad16874e2140
stdlib@go1.18
1.25.10

Open the chart page →

11,827
jaegerwikimedia3.1.24 of 4See more

jaeger wikimedia 3.1.2

4 of the 4 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
jaegertracing/jaeger-agent:1.53.00214a0ef24b1
stdlib@go1.21.5
1.25.10
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
stdlib@go1.18.2
1.25.10
jaegertracing/jaeger-collector:1.53.07f1269222903
stdlib@go1.21.5
1.25.10
jaegertracing/jaeger-query:1.53.0049bb0d64ea3
stdlib@go1.21.5
1.25.10

Open the chart page →

9,340
opentelemetry-collectorwikimedia0.62.71 of 1See more

opentelemetry-collector wikimedia 0.62.7

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.81.0c6671841470b
stdlib@go1.20.5
1.25.10

Open the chart page →

2,032
wireguardwireguard-bananas1.5.01 of 1See more

wireguard wireguard-bananas 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
place1/wg-access-server:v0.4.62b2f3ea80ed6
stdlib@go1.13.8
1.25.10

Open the chart page →

2,752
csi-driver-host-pathwiremindVerified publisher0.1.18 of 8See more

csi-driver-host-path wiremind 0.1.1

8 of the 8 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-attacher:v4.0.09a685020911e
stdlib@go1.18
1.25.10
registry.k8s.io/sig-storage/csi-external-health-monitor-controller:v0.7.080b9ba94aa2a
stdlib@go1.18
1.25.10
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.6.0f1c25991bac2
stdlib@go1.18
1.25.10
registry.k8s.io/sig-storage/csi-provisioner:v3.3.0ee3b525d5b89
stdlib@go1.18
1.25.10
registry.k8s.io/sig-storage/csi-resizer:v1.6.0425d8f1b7693
stdlib@go1.18
1.25.10
registry.k8s.io/sig-storage/csi-snapshotter:v6.1.0291334908ddf
stdlib@go1.18
1.25.10
registry.k8s.io/sig-storage/hostpathplugin:v1.9.092257881c1d6
stdlib@go1.18
1.25.10
registry.k8s.io/sig-storage/livenessprobe:v2.8.0cacee2b5c36d
stdlib@go1.18
1.25.10

Open the chart page →

12,663
dex-k8s-authenticatorwiremindVerified publisher1.7.01 of 1See more

dex-k8s-authenticator wiremind 1.7.0

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
mintel/dex-k8s-authenticator:1.4.0caf71cee7b9a
stdlib@go1.13.11
1.25.10

Open the chart page →

2,792
druid-tasks-exporterwiremindVerified publisher0.3.01 of 1See more

druid-tasks-exporter wiremind 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
ghcr.io/wiremind/druid-tasks-exporter:v0.4.04755c3fcd5f0
stdlib@go1.21.4
1.25.10

Open the chart page →

533
keycloakwiremindVerified publisher25.3.11 of 2See more

keycloak wiremind 25.3.1

1 of the 2 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
ghcr.io/wiremind/bitnami/keycloak:26.5.0-debian-12-r38622ea9e43c0
stdlib@go1.25.5
1.25.10

Open the chart page →

7,687
koherencewiremindVerified publisher0.4.11 of 1See more

koherence wiremind 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
ghcr.io/wiremind/koherence:v0.2.39c2afc45c55d
stdlib@go1.22.3
1.25.10

Open the chart page →

426
orcwiremindVerified publisher0.3.01 of 1See more

orc wiremind 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
quay.io/orc/openstack-resource-controller:v2.5.079f22af49612
stdlib@go1.25.9
1.25.10

Open the chart page →

269
postgres-operatorwiremindVerified publisher1.14.0-wiremind01 of 1See more

postgres-operator wiremind 1.14.0-wiremind0

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
ghcr.io/zalando/postgres-operator:v1.14.04f40cfc2283b
stdlib@go1.23.4
1.25.10

Open the chart page →

1,287
prometheus-openstack-exporterwiremindVerified publisher0.5.01 of 1See more

prometheus-openstack-exporter wiremind 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
ghcr.io/openstack-exporter/openstack-exporter:1.7.0e5146a7dd515
stdlib@go1.18.10
1.25.10

Open the chart page →

1,480
prometheus-safety-exporterwiremindVerified publisher0.6.01 of 2See more

prometheus-safety-exporter wiremind 0.6.0

1 of the 2 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
quay.io/prometheuscommunity/json-exporter:v0.7.03a777171d39a
stdlib@go1.23.6
1.25.10

Open the chart page →

725
rediswiremindVerified publisher23.0.61 of 1See more

redis wiremind 23.0.6

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
ghcr.io/wiremind/bitnami/redis:8.4.0-debian-12-r31f0f7ddc4370
stdlib@go1.25.5
1.25.10

Open the chart page →

2,143
registrywiremindVerified publisher0.1.11 of 1See more

registry wiremind 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
ghcr.io/distribution/distribution:3.0.04ba3adf47f5c
stdlib@go1.23.7
1.25.10

Open the chart page →

1,195
silence-operatorwiremindVerified publisher0.0.81 of 1See more

silence-operator wiremind 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
giantswarm/silence-operator:0.13.0a6cac55aa2d4
stdlib@go1.24.1
1.25.10

Open the chart page →

790
kafka-connect-uiwitcom-gmbh0.5.01 of 2See more

kafka-connect-ui witcom-gmbh 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
quay.io/oauth2-proxy/oauth2-proxy:v7.3.08c21390be87d
stdlib@go1.17.10
1.25.10

Open the chart page →

2,512

Container images carrying it

4,519 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
argoproj/argocd:v1.8.1830e86cacefd
stdlib@go1.14.12
1.25.10
3
bitnamilegacy/kubectl:latestcd354d5b2556
stdlib@go1.24.5
1.25.10
3
bitnamilegacy/mongodb:6.0.4-debian-11-r10016dce036593
stdlib@go1.17.10
1.25.10
3
bitnamilegacy/os-shell:12-debian-12-r5177e65e9d633e
stdlib@go1.25.0
1.25.10
3
caddy/ingress:v0.2.118d1366fc0e9
stdlib@go1.21.4
1.25.10
3
ciscolabs/rtsp-server:latestb59fc10bb821
stdlib@go1.19.2
1.25.10
3
cloudpirates/image-minio:RELEASE.2025-10-15T17-29-55Z-hardened8dc02a7e5093
stdlib@go1.25.7
1.25.10
3
cockroachdb/cockroach-self-signer-cert:1.1007a49acec18d
stdlib@go1.23.12
1.25.10
3
csiplugin/csi-resizer:v1.2.036c31f7e1f43
stdlib@go1.16
1.25.10
3
csiplugin/csi-snapshotter:v4.0.051f2dfde5bcc
stdlib@go1.15
1.25.10
3
derailed/popeye:v0.22.18e68e22c7663
stdlib@go1.23.5
1.25.10
3
dgraph/dgraph:v21.12.03b55ea83fffe
stdlib@go1.17.3
1.25.10
3
ethpandaops/tracoor:latestd8514b9f4c59
stdlib@go1.24.13
1.25.10
3
grafana/grafana:8.2.500568d89c4f8
stdlib@go1.17
1.25.10
3
grafana/grafana:11.0.00dc5a246ab16
stdlib@go1.21.10
1.25.10
3
grafana/grafana:13.2.1-distroless3600073f45a9
stdlib@go1.25.7
1.25.10
3
grafana/grafana:11.3.0a0f881232a6f
stdlib@go1.23.1
1.25.10
3
grafana/loki:3.4.258a6c186ce78
stdlib@go1.23.6
1.25.10
3
grafana/loki-canary:3.6.70dac7d5cb383
stdlib@go1.24.13
1.25.10
3
grafana/promtail:2.4.2626900031c4e
stdlib@go1.17.2
1.25.10
3
groundnuty/k8s-wait-for:v2.0c14d7271e401
stdlib@go1.19.3
1.25.10
3
hashicorp/http-echo:1.0.0:latestfcb75f691c8b
stdlib@go1.21.1
1.25.10
3
jacobalberty/unifi:v10.0.162896c0ab82d33
stdlib@go1.24.6
1.25.10
3
jaegertracing/all-in-one:latestab6f1a1f0fb4
stdlib@go1.25.4
1.25.10
3
kubegems/kubegems:v1.24.10a730bcf9322a
stdlib@go1.24.10
1.25.10
3
library/docker:20.10-dind:20-dindaf96c680a7e1
stdlib@go1.19.7
1.25.10
3
library/mariadb:12.3.3ab1c3dd38194
stdlib@go1.24.6
1.25.10
3
library/mysql:latest66aec17cd21a
stdlib@go1.24.6
1.25.10
3
library/nats:2.10-alpineb83efabe3e7d
stdlib@go1.24.2
1.25.10
3
library/postgres:14.13162a6ead070
stdlib@go1.16.7
1.25.10
3
library/postgres:15.7-alpine:15.7-alpine3.20468d34fefd63
stdlib@go1.18.2
1.25.10
3
library/postgres:115d2aa4a7b5f9
stdlib@go1.16.7
1.25.10
3
library/postgres:14-alpine727876d27466
stdlib@go1.24.6
1.25.10
3
library/redis:7.2.4-alpinec8bb255c3559
stdlib@go1.18.2
1.25.10
3
louislam/uptime-kuma:2.5.4917318f9d7be
stdlib@go1.20.5
1.25.10
3
migrate/migrate:latestcc4ad8e19d66
stdlib@go1.25.4
1.25.10
3
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
stdlib@go1.15.7
1.25.10
3
mintel/dex-k8s-authenticator:1.4.0caf71cee7b9a
stdlib@go1.13.11
1.25.10
3
natsio/nats-box:0.19.28031d190c7ee
stdlib@go1.25.2
1.25.10
3
natsio/nats-server-config-reloader:0.13.0b3359eeb10bf
stdlib@go1.20.5
1.25.10
3
neosmemo/memos:0.30.071a5b4738d1b
stdlib@go1.26.2
1.25.10
3
opencsghq/postgres:15.19b98600564e07
stdlib@go1.24.6
1.25.10
3
oryd/hydra:v2.2.02c93beb5e5f2
stdlib@go1.21.5
1.25.10
3
prom/alertmanager:v0.28.0d5155cfac40a
stdlib@go1.23.4
1.25.10
3
prom/memcached-exporter:v0.14.2d8a61419b841
stdlib@go1.21.5
1.25.10
3
prom/prometheus:v3.0.1565ee8650122
stdlib@go1.23.3
1.25.10
3
prom/prometheus:v2.19.0bfad037f95e5
stdlib@go1.14.4
1.25.10
3
prom/pushgateway:v1.2.00a9031142481
stdlib@go1.13.8
1.25.10
3
prom/pushgateway:v1.3.18305a33fb80a
stdlib@go1.15.6
1.25.10
3
prom/statsd-exporter:v0.28.04e7a1f00b9b2
stdlib@go1.23.2
1.25.10
3

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.