StackRadar

CVE-2026-39820

High

Advisory

Published 7 May 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.008
55th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
4,043
of 17,821 indexed, latest versions
Container images
4,634
deployed by those charts
Fix available
1 of 2
affected packages

Quadratic string concatentation in consumeComment in net/mail

Carried by container images the latest versions of 4,043 of 17,821 indexed charts deploy, on 4,634 images.

Affected packageAffected versionsFixed inImages
golang-1.19deb1.19.8-2no fix listed1
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+182 more1.25.104,634
OSV records
DEBIAN-CVE-2026-39820GO-2026-4986
Also known as
BIT-golang-2026-39820

Charts affected

4,043 by stars
ChartLatestAffected imagesRadar Score
longhornwener1.2.31 of 2See more

longhorn wener 1.2.3

1 of the 2 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.2.3dca34321452c
stdlib@go1.14.1
1.25.10

Open the chart page →

15,486
minio-operatorwener4.3.71 of 2See more

minio-operator wener 4.3.7

1 of the 2 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
minio/operator:v4.3.754393e03f3b2
stdlib@go1.17.4
1.25.10

Open the chart page →

6,091
natswener2.14.61 of 3See more

nats wener 2.14.6

1 of the 3 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
natsio/nats-server-config-reloader:0.23.064cb6c858e79
stdlib@go1.25.6
1.25.10

Open the chart page →

2,310
nats-account-serverwener0.8.11 of 1See more

nats-account-server wener 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
natsio/nats-account-server:1.0.0a3381560aab6
stdlib@go1.16.6
1.25.10

Open the chart page →

2,635
nfs-subdir-external-provisionerwener4.0.181 of 1See more

nfs-subdir-external-provisioner wener 4.0.18

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner:v4.0.263d5e04551ec
stdlib@go1.15
1.25.10

Open the chart page →

2,746
openebswener3.10.03 of 3See more

openebs wener 3.10.0

3 of the 3 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
openebs/node-disk-manager:2.1.0f6c18b0f8c8a
stdlib@go1.19.3
1.25.10
openebs/node-disk-operator:2.1.06afe2123c457
stdlib@go1.19.3
1.25.10
openebs/provisioner-localpv:3.5.0aea39e49bb97
stdlib@go1.19.13
1.25.10

Open the chart page →

10,633
prometheus-blackbox-exporterwener11.18.01 of 1See more

prometheus-blackbox-exporter wener 11.18.0

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
quay.io/prometheus/blackbox-exporter:v0.28.0e753ff9f3fc4
stdlib@go1.25.5
1.25.10

Open the chart page →

600
prometheus-statsd-exporterwener1.0.01 of 1See more

prometheus-statsd-exporter wener 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
prom/statsd-exporter:v0.28.04e7a1f00b9b2
stdlib@go1.23.2
1.25.10

Open the chart page →

783
rancherwener2.15.11 of 2See more

rancher wener 2.15.1

1 of the 2 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
rancher/rancher:v2.15.15f6c4dc52a05
stdlib@go1.26.1
1.25.10

Open the chart page →

1,534
temporalwener0.15.16 of 13See more

temporal wener 0.15.1

6 of the 13 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
grafana/grafana:6.7.11ff3999e0fc0
stdlib@go1.13.4
1.25.10
prom/alertmanager:v0.20.07e4e9f7a0954
stdlib@go1.13.5
1.25.10
prom/prometheus:v2.16.0e4ca62c0d62f
stdlib@go1.13.8
1.25.10
prom/pushgateway:v1.0.1a5df60347882
stdlib@go1.13.5
1.25.10
temporalio/admin-tools:1.15.135034611d981
stdlib@go1.17.6
1.25.10
temporalio/server:1.15.1e26758f5a1bf
stdlib@go1.17.6
1.25.10

Open the chart page →

22,719
traefikwener9.1.11 of 1See more

traefik wener 9.1.1

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
library/traefik:2.2.8f5af5a5ce17f
stdlib@go1.14.6
1.25.10

Open the chart page →

3,379
victoria-metrics-k8s-stackwener0.93.01 of 7See more

victoria-metrics-k8s-stack wener 0.93.0

1 of the 7 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
quay.io/prometheus/node-exporter:v1.11.10f422f62c15f
stdlib@go1.26.1
1.25.10

Open the chart page →

1,955
ambassadorwenerme6.9.51 of 2See more

ambassador wenerme 6.9.5

1 of the 2 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
datawire/aes:1.14.48588eafe6862
stdlib@go1.15
1.25.10

Open the chart page →

4,131
apisixwenerme2.17.01 of 3See more

apisix wenerme 2.17.0

1 of the 3 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
bitnamilegacy/etcd:latest99b408c15272
stdlib@go1.23.10
1.25.10

Open the chart page →

3,107
argo-eventswenerme2.4.271 of 1See more

argo-events wenerme 2.4.27

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
quay.io/argoproj/argo-events:v1.9.11fa07b2c9ece6
stdlib@go1.25.6
1.25.10

Open the chart page →

1,093
athens-proxywenerme0.5.22 of 2See more

athens-proxy wenerme 0.5.2

2 of the 2 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
gomods/athens:v0.11.0efb811df7844
stdlib@go1.13.10
1.25.10
jaegertracing/all-in-one:latestab6f1a1f0fb4
stdlib@go1.25.4
1.25.10

Open the chart page →

5,009
cadencewenerme0.23.02 of 5See more

cadence wenerme 0.23.0

2 of the 5 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
ubercadence/server:0.23.22ac5491d13bb
stdlib@go1.13.6
1.25.10
ghcr.io/banzaicloud/tcheck:latest0147d87c2019
stdlib@go1.15.2
1.25.10

Open the chart page →

10,153
emissary-ingresswenerme8.12.21 of 2See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
datawire/emissary:3.12.21f67a1292d2a
stdlib@go1.22.4
1.25.10

Open the chart page →

77,304
filebrowserwenerme1.0.01 of 1See more

filebrowser wenerme 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
filebrowser/filebrowser:v2.13.0c5d0a75a0041
stdlib@go1.16.2
1.25.10

Open the chart page →

3,175
frpcwenerme1.0.11 of 1See more

frpc wenerme 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
wener/frpc:v0.37.0cc9fd4da44c0
stdlib@go1.17.3
1.25.10

Open the chart page →

3,361
giteawenerme12.7.02 of 4See more

gitea wenerme 12.7.0

2 of the 4 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
bitnamilegacy/pgpool:4.6.3-debian-12-r0d3bf3910f148
stdlib@go1.25.0
1.25.10
bitnamilegacy/valkey-cluster:8.1.3-debian-12-r332869e769b7e
stdlib@go1.24.6
1.25.10

Open the chart page →

8,751
juicefs-csi-driverwenerme0.33.03 of 5See more

juicefs-csi-driver wenerme 0.33.0

3 of the 5 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.9.0cd21e19cd8bb
stdlib@go1.20.5
1.25.10
registry.k8s.io/sig-storage/csi-resizer:v1.9.0f1f352df9787
stdlib@go1.20.5
1.25.10
registry.k8s.io/sig-storage/livenessprobe:v2.12.05baeb4a6d7d5
stdlib@go1.21.5
1.25.10

Open the chart page →

9,091
kubernetes-dashboardwenerme7.14.04 of 5See more

kubernetes-dashboard wenerme 7.14.0

4 of the 5 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
kubernetesui/dashboard-api:1.14.096a702cfd339
stdlib@go1.23.12
1.25.10
kubernetesui/dashboard-auth:1.4.053e9917898bf
stdlib@go1.23.12
1.25.10
kubernetesui/dashboard-metrics-scraper:1.2.25154b68252bd
stdlib@go1.23.4
1.25.10
kubernetesui/dashboard-web:1.7.0cc7c31bd2d84
stdlib@go1.23.9
1.25.10

Open the chart page →

3,548
logging-operatorwenerme3.17.101 of 1See more

logging-operator wenerme 3.17.10

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
ghcr.io/banzaicloud/logging-operator:3.17.101b530cf7c07f
stdlib@go1.17.13
1.25.10

Open the chart page →

1,647
longhornwenerme1.2.31 of 2See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.2.3dca34321452c
stdlib@go1.14.1
1.25.10

Open the chart page →

15,486
miniowenerme8.0.101 of 1See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
stdlib@go1.15.7
1.25.10

Open the chart page →

6,953
minio-standalonewenerme1.0.21 of 1See more

minio-standalone wenerme 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2022-01-04T07-41-07Z1484c87239ea
stdlib@go1.17.5
1.25.10

Open the chart page →

6,176
nats-account-serverwenerme0.8.11 of 1See more

nats-account-server wenerme 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
natsio/nats-account-server:1.0.0a3381560aab6
stdlib@go1.16.6
1.25.10

Open the chart page →

2,635
nfs-subdir-external-provisionerwenerme4.0.181 of 1See more

nfs-subdir-external-provisioner wenerme 4.0.18

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner:v4.0.263d5e04551ec
stdlib@go1.15
1.25.10

Open the chart page →

2,746
openebswenerme3.10.03 of 3See more

openebs wenerme 3.10.0

3 of the 3 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
openebs/node-disk-manager:2.1.0f6c18b0f8c8a
stdlib@go1.19.3
1.25.10
openebs/node-disk-operator:2.1.06afe2123c457
stdlib@go1.19.3
1.25.10
openebs/provisioner-localpv:3.5.0aea39e49bb97
stdlib@go1.19.13
1.25.10

Open the chart page →

10,633
prometheus-snmp-exporterwenerme9.18.01 of 1See more

prometheus-snmp-exporter wenerme 9.18.0

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
quay.io/prometheus/snmp-exporter:v0.30.1e5fd5e8b43ac
stdlib@go1.25.5
1.25.10

Open the chart page →

509
prometheus-statsd-exporterwenerme1.0.01 of 1See more

prometheus-statsd-exporter wenerme 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
prom/statsd-exporter:v0.28.04e7a1f00b9b2
stdlib@go1.23.2
1.25.10

Open the chart page →

783
rancherwenerme2.15.11 of 2See more

rancher wenerme 2.15.1

1 of the 2 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
rancher/rancher:v2.15.15f6c4dc52a05
stdlib@go1.26.1
1.25.10

Open the chart page →

1,534
temporalwenerme0.15.16 of 13See more

temporal wenerme 0.15.1

6 of the 13 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
grafana/grafana:6.7.11ff3999e0fc0
stdlib@go1.13.4
1.25.10
prom/alertmanager:v0.20.07e4e9f7a0954
stdlib@go1.13.5
1.25.10
prom/prometheus:v2.16.0e4ca62c0d62f
stdlib@go1.13.8
1.25.10
prom/pushgateway:v1.0.1a5df60347882
stdlib@go1.13.5
1.25.10
temporalio/admin-tools:1.15.135034611d981
stdlib@go1.17.6
1.25.10
temporalio/server:1.15.1e26758f5a1bf
stdlib@go1.17.6
1.25.10

Open the chart page →

22,719
traefikwenerme9.1.11 of 1See more

traefik wenerme 9.1.1

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
library/traefik:2.2.8f5af5a5ce17f
stdlib@go1.14.6
1.25.10

Open the chart page →

3,379
victoria-metrics-k8s-stackwenerme0.93.01 of 7See more

victoria-metrics-k8s-stack wenerme 0.93.0

1 of the 7 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
quay.io/prometheus/node-exporter:v1.11.10f422f62c15f
stdlib@go1.26.1
1.25.10

Open the chart page →

1,955
wexa-studiowexa-studio1.2.07 of 15See more

wexa-studio wexa-studio 1.2.0

7 of the 15 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
hashicorp/vault:1.15.40b01ed3924e6
stdlib@go1.21.4
1.25.10
library/postgres:15-alpinefe0737ba566a
stdlib@go1.24.6
1.25.10
minio/minio:RELEASE.2024-01-16T16-07-38Z4c4a4876193f
stdlib@go1.21.6
1.25.10
temporalio/admin-tools:1.29.1-tctl-1.18.4-cli-1.5.0a3a52e6ca122
stdlib@go1.25.0
1.25.10
temporalio/server:1.29.1c1e3326b2ce1
stdlib@go1.25.0
1.25.10
temporalio/ui:2.44.00b36e00aad30
stdlib@go1.24.11
1.25.10
quay.io/mongodb/mongodb-kubernetes-operator:0.9.05ee4bd681085
stdlib@go1.21.4
1.25.10

Open the chart page →

15,394
whereaboutswhereaboutsVerified publisher0.3.01 of 1See more

whereabouts whereabouts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4f279fd7dc112
stdlib@go1.25.6
1.25.10

Open the chart page →

619
wikiwikijs3.0.01 of 2See more

wiki wikijs 3.0.0

1 of the 2 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
stdlib@go1.24.6
1.25.10

Open the chart page →

5,462
ceph-csi-cephfswikimedia0.1.85 of 5See more

ceph-csi-cephfs wikimedia 0.1.8

5 of the 5 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
gcr.io/k8s-staging-sig-storage/csi-provisioner:v3.2.14ad5fcdbe7e9
stdlib@go1.18
1.25.10
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
stdlib@go1.18.5
1.25.10
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.5.10103eee7c35e
stdlib@go1.17.3
1.25.10
registry.k8s.io/sig-storage/csi-resizer:v1.5.08f7520bd957e
stdlib@go1.18
1.25.10
registry.k8s.io/sig-storage/csi-snapshotter:v6.0.1ad16874e2140
stdlib@go1.18
1.25.10

Open the chart page →

10,337
ceph-csi-rbdwikimedia0.1.136 of 6See more

ceph-csi-rbd wikimedia 0.1.13

6 of the 6 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
gcr.io/k8s-staging-sig-storage/csi-provisioner:v3.2.14ad5fcdbe7e9
stdlib@go1.18
1.25.10
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
stdlib@go1.18.5
1.25.10
registry.k8s.io/sig-storage/csi-attacher:v3.5.0dd245051317e
stdlib@go1.18
1.25.10
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.5.10103eee7c35e
stdlib@go1.17.3
1.25.10
registry.k8s.io/sig-storage/csi-resizer:v1.5.08f7520bd957e
stdlib@go1.18
1.25.10
registry.k8s.io/sig-storage/csi-snapshotter:v6.0.1ad16874e2140
stdlib@go1.18
1.25.10

Open the chart page →

11,844
jaegerwikimedia3.1.24 of 4See more

jaeger wikimedia 3.1.2

4 of the 4 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
jaegertracing/jaeger-agent:1.53.00214a0ef24b1
stdlib@go1.21.5
1.25.10
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
stdlib@go1.18.2
1.25.10
jaegertracing/jaeger-collector:1.53.07f1269222903
stdlib@go1.21.5
1.25.10
jaegertracing/jaeger-query:1.53.0049bb0d64ea3
stdlib@go1.21.5
1.25.10

Open the chart page →

9,364
opentelemetry-collectorwikimedia0.62.71 of 1See more

opentelemetry-collector wikimedia 0.62.7

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.81.0c6671841470b
stdlib@go1.20.5
1.25.10

Open the chart page →

2,035
wireguardwireguard-bananas1.5.01 of 1See more

wireguard wireguard-bananas 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
place1/wg-access-server:v0.4.62b2f3ea80ed6
stdlib@go1.13.8
1.25.10

Open the chart page →

2,753
csi-driver-host-pathwiremindVerified publisher0.1.18 of 8See more

csi-driver-host-path wiremind 0.1.1

8 of the 8 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-attacher:v4.0.09a685020911e
stdlib@go1.18
1.25.10
registry.k8s.io/sig-storage/csi-external-health-monitor-controller:v0.7.080b9ba94aa2a
stdlib@go1.18
1.25.10
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.6.0f1c25991bac2
stdlib@go1.18
1.25.10
registry.k8s.io/sig-storage/csi-provisioner:v3.3.0ee3b525d5b89
stdlib@go1.18
1.25.10
registry.k8s.io/sig-storage/csi-resizer:v1.6.0425d8f1b7693
stdlib@go1.18
1.25.10
registry.k8s.io/sig-storage/csi-snapshotter:v6.1.0291334908ddf
stdlib@go1.18
1.25.10
registry.k8s.io/sig-storage/hostpathplugin:v1.9.092257881c1d6
stdlib@go1.18
1.25.10
registry.k8s.io/sig-storage/livenessprobe:v2.8.0cacee2b5c36d
stdlib@go1.18
1.25.10

Open the chart page →

12,666
dex-k8s-authenticatorwiremindVerified publisher1.7.01 of 1See more

dex-k8s-authenticator wiremind 1.7.0

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
mintel/dex-k8s-authenticator:1.4.0caf71cee7b9a
stdlib@go1.13.11
1.25.10

Open the chart page →

2,793
druid-tasks-exporterwiremindVerified publisher0.3.01 of 1See more

druid-tasks-exporter wiremind 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
ghcr.io/wiremind/druid-tasks-exporter:v0.4.04755c3fcd5f0
stdlib@go1.21.4
1.25.10

Open the chart page →

533
keycloakwiremindVerified publisher25.3.11 of 2See more

keycloak wiremind 25.3.1

1 of the 2 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
ghcr.io/wiremind/bitnami/keycloak:26.5.0-debian-12-r38622ea9e43c0
stdlib@go1.25.5
1.25.10

Open the chart page →

7,616
koherencewiremindVerified publisher0.4.11 of 1See more

koherence wiremind 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
ghcr.io/wiremind/koherence:v0.2.39c2afc45c55d
stdlib@go1.22.3
1.25.10

Open the chart page →

426
orcwiremindVerified publisher0.3.01 of 1See more

orc wiremind 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-39820.

Container imageDigestPackageFixed in
quay.io/orc/openstack-resource-controller:v2.5.079f22af49612
stdlib@go1.25.9
1.25.10

Open the chart page →

277

Container images carrying it

4,634 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/base-org/node:v0.11.11aba0ffe55ea
stdlib@go1.22.10
1.25.10
1
ghcr.io/bbdsoftware/litellm-operator:1.1.2167a51113d90
stdlib@go1.26.2
1.25.10
1
ghcr.io/beezlabs-org/cloudflare-tunnel-operator:v0.1.09afcd070940f
stdlib@go1.17.12
1.25.10
1
ghcr.io/behappy-project/behappy-tencentcloud-exporter:0.1.3a0ba56e1501b
stdlib@go1.21.13
1.25.10
1
ghcr.io/beluga-cloud/helm-dashboard/dashboard:1.3.39ab9a675c405
stdlib@go1.20.8
1.25.10
1
ghcr.io/benc-uk/kubeview:0.1.31f8e7cd7325a3
stdlib@go1.17.2
1.25.10
1
ghcr.io/bitmagnet-io/bitmagnet:v0.10b6373349a301
stdlib@go1.23.6
1.25.10
1
ghcr.io/bitmagnet-io/bitmagnet:v0.10.0cf2c16fac5b5
stdlib@go1.23.6
1.25.10
1
ghcr.io/blakeblackshear/frigate:0.14.122e3d0b486df
stdlib@go1.17.1
1.25.10
1
ghcr.io/blakeblackshear/frigate:0.13.07a5244e4c8dc
stdlib@go1.20.3
1.25.10
1
ghcr.io/blind-oracle/cortex-tenant:v2.0.09f8896ffc15b
stdlib@go1.25.1
1.25.10
1
ghcr.io/bluesky-social/pds:0.4.208637083d9369d
stdlib@go1.25.7
1.25.10
1
ghcr.io/bluesky-social/pds:0.4.204cbc6e3ea157d
stdlib@go1.25.6
1.25.10
1
ghcr.io/bnb-chain/bsc:1.6.2fd0e3ec7d960
stdlib@go1.24.9
1.25.10
1
ghcr.io/bojanzelic/cloudflare-zero-trust-operator:0.7.1f4b2dbc19a78
stdlib@go1.23.4
1.25.10
1
ghcr.io/borchero/switchboard:0.7.454a193b757da
stdlib@go1.26.1
1.25.10
1
ghcr.io/borgmatic-collective/borgmatic:1.9.9835b72878606
stdlib@go1.23.5
1.25.10
1
ghcr.io/botify-labs/airbyte_exporter:2.3.02105b1f33013
stdlib@go1.21.6
1.25.10
1
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
stdlib@go1.18.10
1.25.10
1
ghcr.io/browsersec/kubebrowse:sha-09dfa1fb853e9e6372a
stdlib@go1.24.3
1.25.10
1
ghcr.io/browsersec/kubebrowse-frontend:chore-improve-backbd6bea5e487c
stdlib@go1.25.0
1.25.10
1
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
stdlib@go1.19.8
1.25.10
1
ghcr.io/buoyantio/metrics-api:preview-25.4.32cef2a3f97da
stdlib@go1.24.2
1.25.10
1
ghcr.io/buoyantio/prometheus:v3.3.1e2b8aa62b648
stdlib@go1.24.2
1.25.10
1
ghcr.io/buoyantio/tap:preview-25.4.3e02a8bd9e2c3
stdlib@go1.24.2
1.25.10
1
ghcr.io/buoyantio/web:preview-25.4.33ee1b62aa111
stdlib@go1.24.2
1.25.10
1
ghcr.io/caarlos0/domain_exporter:v1.18.0-arm64c852606428cf
stdlib@go1.19.2
1.25.10
1
ghcr.io/cableship/argocd-source-tracker:0.0.6ff7dd45aa774
stdlib@go1.24.2
1.25.10
1
ghcr.io/cableship/chart-sentinel:0.1.0a037f1042b28
stdlib@go1.24.2
1.25.10
1
ghcr.io/camptocamp/prometheus-puppetdb-sd:0.14.0414c0c99fd06
stdlib@go1.23.5
1.25.10
1
ghcr.io/camptocamp/terraboard:v2.3.0df53e2c8998c
stdlib@go1.21.3
1.25.10
1
ghcr.io/caninehq/canine:latesta058034ca006
stdlib@go1.22.7
1.25.10
1
ghcr.io/celestiaorg/celestia-app:v3.7.0-arabica23a9ec9b1879
stdlib@go1.23.6
1.25.10
1
ghcr.io/celestiaorg/celestia-app:v6.1.0-rc0a604aefa3fae
stdlib@go1.24.6
1.25.10
1
ghcr.io/celestiaorg/celestia-node:v0.16.041177982c584
stdlib@go1.23.0
1.25.10
1
ghcr.io/cerbos/cerbos:0.51.08d35a64e4a99
stdlib@go1.25.6
1.25.10
1
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
stdlib@go1.22.10
1.25.10
1
ghcr.io/chaos-mesh/chaos-daemon:v2.7.29608d9b51452
stdlib@go1.16.2
1.25.10
1
ghcr.io/chaos-mesh/chaos-daemon:v2.5.1cf78fdf7403a
stdlib@go1.18
1.25.10
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.0fb609bc264d9
stdlib@go1.24.4
1.25.10
1
ghcr.io/chaos-mesh/chaos-dashboard:v2.7.211cdbbc479b3
stdlib@go1.20.8
1.25.10
1
ghcr.io/chaos-mesh/chaos-dashboard:v2.5.1448cb346b12c
stdlib@go1.18
1.25.10
1
ghcr.io/chaos-mesh/chaos-dashboard:v2.8.0e7f9e8f1d565
stdlib@go1.24.4
1.25.10
1
ghcr.io/chaos-mesh/chaos-mesh:v2.8.0091b906a0b13
stdlib@go1.24.4
1.25.10
1
ghcr.io/chaos-mesh/chaos-mesh:v2.5.1700bb42ac21d
stdlib@go1.18
1.25.10
1
ghcr.io/chaos-mesh/chaos-mesh:v2.7.28bc853c7414c
stdlib@go1.20.8
1.25.10
1
ghcr.io/chatwoot/pgvector:14.4.0-debian-11-r0f759f1510d09
stdlib@go1.16.7
1.25.10
1
ghcr.io/chronicleprotocol/challenger-go:0.1.2c8d5a3c0e966
stdlib@go1.22.12
1.25.10
1
ghcr.io/chronicleprotocol/gofer:0.613915d2e41e04
stdlib@go1.24.6
1.25.10
1
ghcr.io/chronicleprotocol/oracles-updates-exporter:0.0.4992d0e793af6
stdlib@go1.19.13
1.25.10
1

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.