Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/cni-plugins :v0.9.1	241592d93640	stdlib@go1.15.8	1.25.10
ghcr.io/k8snetworkplumbingwg/multus-cni :v3.7.1	e72aa733faf2	stdlib@go1.13.10	1.25.10

Open the chart page →

4,915

network-ups-toolsgeek-cookbook

6.4.2

1 of 1 See more

network-ups-tools geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/network-ups-tools :v2.7.4-2479-g86a32237	cbd5d4cc1245	stdlib@go1.15	1.25.10

Open the chart page →

14,004

plexgeek-cookbook

6.4.3

1 of 1 See more

plex geek-cookbook 6.4.3

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/plex :v1.28.0.5999-97678ded3	ef756c7d784b	stdlib@go1.18.4	1.25.10

Open the chart page →

9,669

signal-cli-rest-apigeek-cookbook

1.2.2

1 of 1 See more

signal-cli-rest-api geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container image	Digest	Package	Fixed in
bbernhard/signal-cli-rest-api :0.57	549ad08d7e14	stdlib@go1.17.8	1.25.10

Open the chart page →

10,221

smarter-device-managergeek-cookbook

6.5.2

1 of 1 See more

smarter-device-manager geek-cookbook 6.5.2

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container image	Digest	Package	Fixed in
registry.gitlab.com/arm-research/smarter/smarter-device-manager :v1.20.7	864fc338571e	stdlib@go1.16.4	1.25.10

Open the chart page →

2,336

statpinggeek-cookbook

6.2.0

1 of 2 See more

statping geek-cookbook 6.2.0

1 of the 2 container images this version deploys carry CVE-2026-39820.

Container image	Digest	Package	Fixed in
statping/statping :v0.90.74	e874da513a5c	stdlib@go1.14.13	1.25.10

Open the chart page →

3,378

syncthinggeek-cookbook

3.5.2

1 of 1 See more

syncthing geek-cookbook 3.5.2

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container image	Digest	Package	Fixed in
syncthing/syncthing :1.18.2	966433161272	stdlib@go1.17	1.25.10

Open the chart page →

2,610

tautulligeek-cookbook

11.4.2

1 of 1 See more

tautulli geek-cookbook 11.4.2

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/tautulli :v2.7.7	4ea617c30397	stdlib@go1.16.7	1.25.10

Open the chart page →

10,671

traefik-forward-authgeek-cookbook

2.2.2

1 of 1 See more

traefik-forward-auth geek-cookbook 2.2.2

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container image	Digest	Package	Fixed in
thomseddon/traefik-forward-auth :2.2.0	e875194d67e2	stdlib@go1.13.12	1.25.10

Open the chart page →

2,234

unifigeek-cookbook

5.1.3

1 of 1 See more

unifi geek-cookbook 5.1.3

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container image	Digest	Package	Fixed in
jacobalberty/unifi :v7.4.162	b3edc809a3ff	stdlib@go1.20.4	1.25.10

Open the chart page →

11,900

ghost-on-kubernetesghost-on-kubernetes-helm

1.1.2

1 of 3 See more

ghost-on-kubernetes ghost-on-kubernetes-helm 1.1.2

1 of the 3 container images this version deploys carry CVE-2026-39820.

Container image	Digest	Package	Fixed in
library/mysql :8.4	b3b90af2a655	stdlib@go1.24.6	1.25.10

Open the chart page →

1,463

gitvotegitvote

1.5.0

2 of 6 See more

gitvote gitvote 1.5.0

2 of the 6 container images this version deploys carry CVE-2026-39820.

Container image	Digest	Package	Fixed in
artifacthub/postgres :latest	4fd34fa635cc	stdlib@go1.24.6	1.25.10
ghcr.io/cncf/gitvote/dbmigrator :v1.5.0	f1e7efe440da	stdlib@go1.25.3	1.25.10

Open the chart page →

5,639

nzbhydra2halkeye

2.30.1

1 of 2 See more

nzbhydra2 halkeye 2.30.1

1 of the 2 container images this version deploys carry CVE-2026-39820.

Container image	Digest	Package	Fixed in
binhex/arch-nzbhydra2 :3.1.0-1-01	fb8952921ab6	stdlib@go1.14	1.25.10

Open the chart page →

6,714

unifi-pollerhalkeye

0.1.2

1 of 1 See more

unifi-poller halkeye 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container image	Digest	Package	Fixed in
golift/unifi-poller :2.0.0	cafac968b540	stdlib@go1.13.7	1.25.10

Open the chart page →

1,654

haproxyhaproxytech

1.30.1

1 of 1 See more

haproxy haproxytech 1.30.1

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container image	Digest	Package	Fixed in
haproxytech/haproxy-alpine :3.4.3	7a3ef2dd8b5b	stdlib@go1.26.0	1.25.10

Open the chart page →

824

whoamiharrytang

0.2.0

1 of 1 See more

whoami harrytang 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container image	Digest	Package	Fixed in
traefik/whoami :v1.11.0	200689790a0a	stdlib@go1.24.1	1.25.10

Open the chart page →

353

monitoring-stackhaukitech

0.1.11

3 of 3 See more

monitoring-stack haukitech 0.1.11

3 of the 3 container images this version deploys carry CVE-2026-39820.

Container image	Digest	Package	Fixed in
quay.io/prometheus-operator/prometheus-operator :v0.77.1	dde69a8b6f4b	stdlib@go1.23.1	1.25.10
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	stdlib@go1.22.5	1.25.10
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.14.0	37d841299325	stdlib@go1.23.3	1.25.10

Open the chart page →

2,164

prometheus-operatorhaukitech

0.1.4

1 of 1 See more

prometheus-operator haukitech 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container image	Digest	Package	Fixed in
quay.io/prometheus-operator/prometheus-operator :v0.77.1	dde69a8b6f4b	stdlib@go1.23.1	1.25.10

Open the chart page →

561

headscaleheadscale

1.0.19

1 of 3 See more

headscale headscale 1.0.19

1 of the 3 container images this version deploys carry CVE-2026-39820.

Container image	Digest	Package	Fixed in
alpine/k8s :1.36.2	44ef4942e171	stdlib@go1.26.0	1.25.10

Open the chart page →

3,439

health-exporterhealth-exporter

0.3.4

1 of 1 See more

health-exporter health-exporter 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container image	Digest	Package	Fixed in
ghcr.io/snapp-incubator/health-exporter :0.3.2	52a0d8f6278c	stdlib@go1.17.2	1.25.10

Open the chart page →

1,558

netbirdhelmforge

1.0.10

1 of 4 See more

netbird helmforge 1.0.10

1 of the 4 container images this version deploys carry CVE-2026-39820.

Container image	Digest	Package	Fixed in
library/postgres :18.6-trixie	4ef4dbc939d6	stdlib@go1.24.6	1.25.10

Open the chart page →

3,035

simple-krr-dashboardhelm-simple-krr-dashboard

1.6.2

1 of 3 See more

simple-krr-dashboard helm-simple-krr-dashboard 1.6.2

1 of the 3 container images this version deploys carry CVE-2026-39820.

Container image	Digest	Package	Fixed in
alpine/kubectl :1.35.2	ec8f734b0a10	stdlib@go1.25.7	1.25.10

Open the chart page →

2,255

helm-watchdog-pod-deletehelm-watchdog-pod-delete

0.3.0

1 of 1 See more

helm-watchdog-pod-delete helm-watchdog-pod-delete 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container image	Digest	Package	Fixed in
alpine/kubectl :1.34.1	8413f8890d19	stdlib@go1.24.6	1.25.10

Open the chart page →

1,153

home-assistanthome-assistant

0.5.10

1 of 3 See more

home-assistant home-assistant 0.5.10

1 of the 3 container images this version deploys carry CVE-2026-39820.

Container image	Digest	Package	Fixed in
ghcr.io/home-assistant/home-assistant :2026.9.0	372d991e5888	stdlib@go1.25.6	1.25.10

Open the chart page →

2,338

hpe-cosi-driverhpe-storage

2.0.0

2 of 2 See more

hpe-cosi-driver hpe-storage 2.0.0

2 of the 2 container images this version deploys carry CVE-2026-39820.

Container image	Digest	Package	Fixed in
quay.io/hpestorage/cosi-driver :v2.0.0	a4d2667f2b6e	stdlib@go1.25.0	1.25.10
registry.k8s.io/sig-storage/objectstorage-sidecar :v0.2.2	c7166a73a303	stdlib@go1.24.11	1.25.10

Open the chart page →

1,679

inference-manager-engineinference-manager-engine

1.46.0

1 of 1 See more

inference-manager-engine inference-manager-engine 1.46.0

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/inference-manager-engine :1.46.0	c46f109c3d0b	stdlib@go1.25.9	1.25.10

Open the chart page →

266

frpc-ingressinfinity-server

0.4.1

1 of 1 See more

frpc-ingress infinity-server 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container image	Digest	Package	Fixed in
springhack/frpc_ingress :latest	4aceb821da88	stdlib@go1.19.5	1.25.10

Open the chart page →

2,623

Container images carrying it

4,539 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
library/nats :2.9.11-alpine	ccbe811b8575	stdlib@go1.19.4	1.25.10	1
library/nats :2.9-alpine	d402af4147fc	stdlib@go1.20.14	1.25.10	1
library/nats :2.9.20-alpine	d6c6ae7df4a0	stdlib@go1.19.11	1.25.10	1
library/nats :2.9.6-alpine3.16	f576cdc17cc3	stdlib@go1.19.3	1.25.10	1
library/nats-streaming :0.25.6	0ad6861379c9	stdlib@go1.20.11	1.25.10	1
library/nats-streaming :0.25.5	ced93c701875	stdlib@go1.19.10	1.25.10	1
library/postgres :13.7	03652c675ae1	stdlib@go1.16.7	1.25.10	1
library/postgres :18.0	073e7c8b84e2	stdlib@go1.24.6	1.25.10	1
library/postgres :14.3	2d1e636f0778	stdlib@go1.16.7	1.25.10	1
library/postgres :17.4	304ab8135187	stdlib@go1.18.2	1.25.10	1
library/postgres :18.4	3a82e1f56c8f	stdlib@go1.24.6	1.25.10	1
library/postgres :18.1-alpine3.21	44d837eb4c2e	stdlib@go1.24.6	1.25.10	1
library/postgres :16.11	468e1f126ca5	stdlib@go1.24.6	1.25.10	1
library/postgres :18.3-alpine	54451ecb8ab3	stdlib@go1.24.6	1.25.10	1
library/postgres :16.6	557fea37a744	stdlib@go1.18.2	1.25.10	1
library/postgres :16.4-alpine	5660c2cbfea5	stdlib@go1.18.2	1.25.10	1
library/postgres :13.11-bullseye	5c265bf1fd30	stdlib@go1.18.2	1.25.10	1
library/postgres :17.5-alpine	6567bca8d7bc	stdlib@go1.18.2	1.25.10	1
library/postgres :18.3	69e8582b781c	stdlib@go1.24.6	1.25.10	1
library/postgres :15.18	6eb0add3b77c	stdlib@go1.24.6	1.25.10	1
library/postgres :17.4-alpine	7062a2109c4b	stdlib@go1.18.2	1.25.10	1
library/postgres :12-alpine	7c8f48705831	stdlib@go1.18.2	1.25.10	1
library/postgres :17.2-alpine	7e5df973a748	stdlib@go1.18.2	1.25.10	1
library/postgres :15.3	8775adb39f0d	stdlib@go1.18.2	1.25.10	1
library/postgres :18.4	8ff36f3c6637	stdlib@go1.24.6	1.25.10	1
library/postgres :18.4-alpine3.24	9a8afca54e78	stdlib@go1.24.6	1.25.10	1
library/postgres :18.3	a9abf4275f9e	stdlib@go1.24.6	1.25.10	1
library/postgres :17.5	aadf2c0696f5	stdlib@go1.18.2	1.25.10	1
library/postgres :13.12	ced3ba927f4c	stdlib@go1.18.2	1.25.10	1
library/postgres :15.18-bookworm	e8db9bd3e9e1	stdlib@go1.24.6	1.25.10	1
library/postgres :14.22	eba8ddbdd837	stdlib@go1.24.6	1.25.10	1
library/postgres :17.10	ebba4f4de37f	stdlib@go1.24.6	1.25.10	1
library/postgres :17.6-alpine	ef257d85f76e	stdlib@go1.24.6	1.25.10	1
library/postgres :14.6	f565573d74ae	stdlib@go1.18.2	1.25.10	1
library/postgres :17.5-bookworm	fbcea1bd13b6	stdlib@go1.18.2	1.25.10	1
library/rabbitmq :4.3.5	1773ab33af6a	stdlib@go1.22.2	1.25.10	1
library/rabbitmq :4.3.5-management	57bddb6fbc34	stdlib@go1.22.2	1.25.10	1
library/rabbitmq :4.2.8	7561d672fae4	stdlib@go1.22.2	1.25.10	1
library/rabbitmq :4.3.4-management	eb5295d08332	stdlib@go1.22.2	1.25.10	1
library/redis :7.0.4	091a7b5de688	stdlib@go1.16.7	1.25.10	1
library/redis :7-bullseye	6a5130174e14	stdlib@go1.18.2	1.25.10	1
library/redis :7.2.5-alpine	6aaf3f5e6bc8	stdlib@go1.18.2	1.25.10	1
library/redis :6.2.20-alpine	77697a75da9f	stdlib@go1.18.2	1.25.10	1
library/redis	83edc2b8e9ff	stdlib@go1.18.2	1.25.10	1
library/redis :7.0.10	92b8b307ee28	stdlib@go1.18.2	1.25.10	1
library/redis :7.4.1	bb142a9c18ac	stdlib@go1.18.2	1.25.10	1
library/redis :7.4.1-alpine	c1e88455c852	stdlib@go1.18.2	1.25.10	1
library/redis :7.0-alpine	c9d92d840fd0	stdlib@go1.18.2	1.25.10	1
library/redmine :6.1.2	04ac44a2595b	stdlib@go1.24.6	1.25.10	1
library/telegraf :1.20.4	28e98eece020	stdlib@go1.17.3	1.25.10	1