CVE-2026-39821

High

Advisory

Published 22 May 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 8.2; base score, highest
EPSS: 0.007; 51st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 4,518; of 17,792 indexed, latest versions
Container images: 5,259; deployed by those charts
Fix available: 3 of 3; affected packages

Red Hat Security Advisory: git-lfs security update

Carried by container images the latest versions of 4,518 of 17,792 indexed charts deploy, on 5,259 images.

Affected package	Affected versions	Fixed in	Images
git-lfsrpm	2.13.3-3.el8_6	0:3.4.1-11.el8_10	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+189 more	1.25.13	5,226
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+220 more	0.55.0	3,669

OSV records: RHSA-2026:30853 GO-2026-5026

Charts affected

4,518 by stars

Chart

Latest

Affected images

Radar Score

kubedb-communityappscode

0.24.2

1 of 2 See more

kubedb-community appscode 0.24.2

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
kubedb/operator :v0.24.0	1a06ff0bda52	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.17.6	0.55.0 1.25.13

Open the chart page →

2,557

kubedb-courierappscode

0.6.0

1 of 1 See more

kubedb-courier appscode 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/kubedb/kubedb-courier :v0.6.0	2f88856584a8	stdlib@go1.25.12	1.25.13

Open the chart page →

278

kubedb-crd-managerappscode

0.21.0

1 of 1 See more

kubedb-crd-manager appscode 0.21.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/kubedb/kubedb-crd-manager :v0.21.0	9506a6cb98d1	stdlib@go1.25.12	1.25.13

Open the chart page →

503

kubedb-dashboardappscode

0.42.0

1 of 1 See more

kubedb-dashboard appscode 0.42.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/kubedb/kubedb-kibana :v0.42.0	735dd5d2709d	stdlib@go1.25.12	1.25.13

Open the chart page →

173

kubedb-enterpriseappscode

0.11.2

1 of 2 See more

kubedb-enterprise appscode 0.11.2

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
kubedb/kubedb-enterprise :v0.11.0	5829bcedcb0d	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.17.3	0.55.0 1.25.13

Open the chart page →

2,581

kubedb-gitopsappscode

0.14.0

1 of 1 See more

kubedb-gitops appscode 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/kubedb/kubedb-gitops :v0.14.0	c743f8d7a199	stdlib@go1.25.12	1.25.13

Open the chart page →

467

kubedb-migratorappscode

0.5.0

1 of 1 See more

kubedb-migrator appscode 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/kubedb/migrator-operator :v0.5.0	98ffb48f5b60	stdlib@go1.25.11	1.25.13

Open the chart page →

290

kubedb-oneappscode

2023.12.28

9 of 10 See more

kubedb-one appscode 2023.12.28

9 of the 10 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
prom/pushgateway :v1.4.2	a684e7c830a4	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.16.9	0.55.0 1.25.13
ghcr.io/kubedb/kubedb-autoscaler :v0.25.0	df6b11907d33	golang.org/x/net@v0.17.0 stdlib@go1.21.5	0.55.0 1.25.13
ghcr.io/kubedb/kubedb-dashboard :v0.16.0	7bfe1c07bd9b	golang.org/x/net@v0.17.0 stdlib@go1.20.7	0.55.0 1.25.13
ghcr.io/kubedb/kubedb-ops-manager :v0.27.1	ec36422b09af	golang.org/x/net@v0.17.0 stdlib@go1.20.14	0.55.0 1.25.13
ghcr.io/kubedb/kubedb-provisioner :v0.40.2	42574f512837	golang.org/x/net@v0.17.0 stdlib@go1.20.14	0.55.0 1.25.13
ghcr.io/kubedb/kubedb-schema-manager :v0.16.0	9518de37eed5	golang.org/x/net@v0.17.0 stdlib@go1.20.7	0.55.0 1.25.13
ghcr.io/kubedb/kubedb-webhook-server :v0.16.2	e24894e32cbc	golang.org/x/net@v0.17.0 stdlib@go1.20.14	0.55.0 1.25.13
ghcr.io/stashed/stash-crd-installer :v0.32.0	c6f2a844b5dd	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.55.0 1.25.13
ghcr.io/stashed/stash-enterprise :v0.32.0	e9bde36e34b7	golang.org/x/net@v0.15.0 stdlib@go1.20.7	0.55.0 1.25.13

Open the chart page →

15,265

kubedb-ops-managerappscode

0.53.0

1 of 1 See more

kubedb-ops-manager appscode 0.53.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/kubedb/kubedb-ops-manager :v0.53.0	6d4c9fe66e4f	stdlib@go1.25.12	1.25.13

Open the chart page →

572

kubedb-provider-awsappscode

2026.7.10

1 of 1 See more

kubedb-provider-aws appscode 2026.7.10

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/kubedb/provider-aws :v0.27.0	49b1c312e342	golang.org/x/net@v0.7.0 stdlib@go1.20.7	0.55.0 1.25.13

Open the chart page →

2,534

kubedb-provider-azureappscode

2026.7.10

1 of 1 See more

kubedb-provider-azure appscode 2026.7.10

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/kubedb/provider-azure :v0.27.0	aa0c8526ae5e	golang.org/x/net@v0.0.0-20220927171203-f486391704dc stdlib@go1.19.3	0.55.0 1.25.13

Open the chart page →

2,712

kubedb-provider-gcpappscode

2026.7.10

2 of 2 See more

kubedb-provider-gcp appscode 2026.7.10

2 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/kubectl-nonroot :1.34	0b26892cec94	golang.org/x/net@v0.38.0 stdlib@go1.24.13	0.55.0 1.25.13
ghcr.io/kubedb/provider-gcp :v0.27.0	a1d4cf8b8fe1	golang.org/x/net@v0.23.0 stdlib@go1.19.1	0.55.0 1.25.13

Open the chart page →

3,040

kubedb-schema-managerappscode

0.42.0

1 of 1 See more

kubedb-schema-manager appscode 0.42.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/kubedb/kubedb-schema-manager :v0.42.0	4e2a3cce7ce8	stdlib@go1.25.12	1.25.13

Open the chart page →

170

kubedb-ui-serverappscode

2021.12.21

1 of 1 See more

kubedb-ui-server appscode 2021.12.21

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
kubedb/kubedb-ui-server :v0.0.1_linux_amd64	7d27865514ee	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.17.8	0.55.0 1.25.13

Open the chart page →

2,054

kubedb-webhook-serverappscode

0.42.0

1 of 1 See more

kubedb-webhook-server appscode 0.42.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/kubedb/kubedb-webhook-server :v0.42.0	f7dcade6523b	stdlib@go1.25.12	1.25.13

Open the chart page →

476

kubeform-provider-awsappscode

2023.11.1

1 of 1 See more

kubeform-provider-aws appscode 2023.11.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/kubeform/provider-aws :v0.0.1	e3d1f1302e49	golang.org/x/net@v0.10.0 stdlib@go1.19.1	0.55.0 1.25.13

Open the chart page →

2,803

kubeform-provider-azureappscode

2023.11.1

1 of 1 See more

kubeform-provider-azure appscode 2023.11.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/kubeform/provider-azure :v0.0.1	ac8459f70f85	golang.org/x/net@v0.0.0-20220927171203-f486391704dc stdlib@go1.20.5	0.55.0 1.25.13

Open the chart page →

2,724

kubeform-provider-gcpappscode

2023.11.1

1 of 1 See more

kubeform-provider-gcp appscode 2023.11.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/kubeform/provider-gcp :v0.0.1	af77073c184f	golang.org/x/net@v0.9.0 stdlib@go1.19.9	0.55.0 1.25.13

Open the chart page →

2,750

kubestashappscode

2026.7.10

2 of 2 See more

kubestash appscode 2026.7.10

2 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/kubectl-nonroot :1.34	0b26892cec94	golang.org/x/net@v0.38.0 stdlib@go1.24.13	0.55.0 1.25.13
ghcr.io/kubestash/kubestash :v0.29.0	43e01ed32486	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.55.0 1.25.13

Open the chart page →

1,098

kubestash-certifiedappscode

2026.7.10

2 of 2 See more

kubestash-certified appscode 2026.7.10

2 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/kubectl-nonroot :1.34	0b26892cec94	golang.org/x/net@v0.38.0 stdlib@go1.24.13	0.55.0 1.25.13
ghcr.io/kubestash/kubestash :v0.29.0	43e01ed32486	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.55.0 1.25.13

Open the chart page →

1,098

kubestash-operatorappscode

0.29.0

2 of 2 See more

kubestash-operator appscode 0.29.0

2 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/kubectl-nonroot :1.34	0b26892cec94	golang.org/x/net@v0.38.0 stdlib@go1.24.13	0.55.0 1.25.13
ghcr.io/kubestash/kubestash :v0.29.0	43e01ed32486	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.55.0 1.25.13

Open the chart page →

1,098

kubevaultappscode

2026.8.7

2 of 2 See more

kubevault appscode 2026.8.7

2 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/kubectl-nonroot :1.34	0b26892cec94	golang.org/x/net@v0.38.0 stdlib@go1.24.13	0.55.0 1.25.13
ghcr.io/kubevault/vault-operator :v0.25.0	c8e042b5cee8	stdlib@go1.25.12	1.25.13

Open the chart page →

806

kubevault-certifiedappscode

2026.2.27

1 of 1 See more

kubevault-certified appscode 2026.2.27

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/kubevault/vault-operator :v0.24.0	0087cb49616f	golang.org/x/net@v0.48.0 stdlib@go1.25.9	0.55.0 1.25.13

Open the chart page →

1,129

kubevault-operatorappscode

0.25.0

1 of 1 See more

kubevault-operator appscode 0.25.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/kubevault/vault-operator :v0.25.0	c8e042b5cee8	stdlib@go1.25.12	1.25.13

Open the chart page →

504

kubevault-webhook-serverappscode

0.25.0

2 of 2 See more

kubevault-webhook-server appscode 0.25.0

2 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/kubectl-nonroot :1.34	0b26892cec94	golang.org/x/net@v0.38.0 stdlib@go1.24.13	0.55.0 1.25.13
ghcr.io/kubevault/vault-operator :v0.25.0	c8e042b5cee8	stdlib@go1.25.12	1.25.13

Open the chart page →

806

kubevirt-infra-csi-driverappscode

0.1.0

5 of 6 See more

kubevirt-infra-csi-driver appscode 0.1.0

5 of the 6 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
quay.io/kubevirt/kubevirt-csi-driver :latest	7b31b21b3f1e	golang.org/x/net@v0.49.0 stdlib@go1.24.13	0.55.0 1.25.13
quay.io/openshift/origin-csi-external-attacher :latest	4f9b3d0f2c7f	stdlib@go1.26.5	1.25.13
quay.io/openshift/origin-csi-external-provisioner :latest	e4074ec254f5	stdlib@go1.26.5	1.25.13
quay.io/openshift/origin-csi-livenessprobe :latest	e9236513d24a	stdlib@go1.26.5	1.25.13
registry.k8s.io/sig-storage/csi-resizer :v1.13.1	2a0b297cc7c4	golang.org/x/net@v0.34.0 stdlib@go1.23.1	0.55.0 1.25.13

Open the chart page →

1,209

kubevirt-tenant-csi-driverappscode

0.1.0

4 of 4 See more

kubevirt-tenant-csi-driver appscode 0.1.0

4 of the 4 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
quay.io/kubevirt/kubevirt-csi-driver :latest	7b31b21b3f1e	golang.org/x/net@v0.49.0 stdlib@go1.24.13	0.55.0 1.25.13
quay.io/openshift/origin-csi-livenessprobe :latest	e9236513d24a	stdlib@go1.26.5	1.25.13
quay.io/openshift/origin-csi-node-driver-registrar :latest	ea08b5e5f4ab	stdlib@go1.26.5	1.25.13
registry.k8s.io/sig-storage/snapshot-controller :v6.3.1	ce6ca3c0e30b	golang.org/x/net@v0.17.0 stdlib@go1.20.5	0.55.0 1.25.13

Open the chart page →

1,297

license-proxyserverappscode

2026.2.16

1 of 1 See more

license-proxyserver appscode 2026.2.16

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/license-proxyserver :v0.1.1	e192ad567e0b	golang.org/x/net@v0.47.0 stdlib@go1.25.7	0.55.0 1.25.13

Open the chart page →

1,113

license-proxyserver-addon-managerappscode

2024.2.25

1 of 1 See more

license-proxyserver-addon-manager appscode 2024.2.25

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/license-proxyserver :v0.0.8	d6c2532ea386	golang.org/x/net@v0.19.0 stdlib@go1.22.1	0.55.0 1.25.13

Open the chart page →

1,391

license-proxyserver-managerappscode

2026.2.16

1 of 1 See more

license-proxyserver-manager appscode 2026.2.16

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/license-proxyserver :v0.1.1	e192ad567e0b	golang.org/x/net@v0.47.0 stdlib@go1.25.7	0.55.0 1.25.13

Open the chart page →

1,113

managed-serviceaccountappscode

2024.2.25

1 of 1 See more

managed-serviceaccount appscode 2024.2.25

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/kluster-manager/managed-serviceaccount :latest	365183f83ac9	golang.org/x/net@v0.19.0 stdlib@go1.22.0	0.55.0 1.25.13

Open the chart page →

2,404

managed-serviceaccount-managerappscode

2026.2.16

1 of 1 See more

managed-serviceaccount-manager appscode 2026.2.16

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/kluster-manager/managed-serviceaccount :v0.10.0	fc256885915b	golang.org/x/net@v0.49.0 stdlib@go1.25.8	0.55.0 1.25.13

Open the chart page →

912

marketplace-apiappscode

2026.9.11

1 of 1 See more

marketplace-api appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/b3 :v2026.9.11	76d28575b71c	golang.org/x/net@v0.38.0 stdlib@go1.25.3	0.55.0 1.25.13

Open the chart page →

2,655

minioappscode

2026.9.11

1 of 1 See more

minio appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2023-01-12T02-06-16Z	fc6bedc99355	golang.org/x/net@v0.5.0 stdlib@go1.19.4	0.55.0 1.25.13

Open the chart page →

4,050

monitoring-operatorappscode

2026.6.12

1 of 1 See more

monitoring-operator appscode 2026.6.12

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/grafana-tools :v0.8.0	77c9d29080eb	golang.org/x/net@v0.52.0	0.55.0

Open the chart page →

368

multicluster-controlplaneappscode

2025.4.30

1 of 1 See more

multicluster-controlplane appscode 2025.4.30

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/kluster-manager/multicluster-controlplane :latest	6de40f528be9	golang.org/x/net@v0.19.0 stdlib@go1.21.8	0.55.0 1.25.13

Open the chart page →

2,575

multicluster-ingress-readerappscode

2024.7.10

1 of 1 See more

multicluster-ingress-reader appscode 2024.7.10

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/kubectl-nonroot :1.34	0b26892cec94	golang.org/x/net@v0.38.0 stdlib@go1.24.13	0.55.0 1.25.13

Open the chart page →

302

offline-license-serverappscode

2026.9.11

1 of 2 See more

offline-license-server appscode 2026.9.11

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/offline-license-server :v0.0.76	e4b66308d8f6	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.55.0 1.25.13

Open the chart page →

1,690

opentelemetry-kube-stackappscode

0.14.12

3 of 3 See more

opentelemetry-kube-stack appscode 0.14.12

3 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
rancher/kubectl :v1.34.1	090bef429ed1	golang.org/x/net@v0.38.0 stdlib@go1.24.6	0.55.0 1.25.13
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator :0.144.0	79b81912f1fb	golang.org/x/net@v0.48.0 stdlib@go1.25.6	0.55.0 1.25.13
quay.io/brancz/kube-rbac-proxy :v0.20.0	147cb28fea35	golang.org/x/net@v0.44.0 stdlib@go1.25.1	0.55.0 1.25.13

Open the chart page →

1,886

operator-shard-managerappscode

2026.6.22

1 of 1 See more

operator-shard-manager appscode 2026.6.22

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/operator-shard-manager :v0.0.6	4a16c6ccecb8	golang.org/x/net@v0.53.0 stdlib@go1.25.11	0.55.0 1.25.13

Open the chart page →

418

panopticonappscode

2026.6.22

2 of 2 See more

panopticon appscode 2026.6.22

2 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/kubectl-nonroot :1.34	0b26892cec94	golang.org/x/net@v0.38.0 stdlib@go1.24.13	0.55.0 1.25.13
ghcr.io/appscode/panopticon :v0.0.23	a645b40d2d3b	stdlib@go1.25.11	1.25.13

Open the chart page →

475

persesappscode

2026.6.2

1 of 1 See more

perses appscode 2026.6.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/opnpulse/perses :v2026.4.24	b880da90aa1a	golang.org/x/net@v0.42.0 stdlib@go1.25.11	0.55.0 1.25.13

Open the chart page →

530

petsetappscode

2026.5.22

1 of 1 See more

petset appscode 2026.5.22

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/petset :v0.1.0	93fa0daf603c	golang.org/x/net@v0.47.0 stdlib@go1.25.10	0.55.0 1.25.13

Open the chart page →

860

pgoutboxappscode

2026.7.10

1 of 1 See more

pgoutbox appscode 2026.7.10

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/pgoutbox :v0.0.4	a96e06ec5e9f	golang.org/x/net@v0.47.0 stdlib@go1.25.12	0.55.0 1.25.13

Open the chart page →

727

platform-apiappscode

2026.9.11

2 of 3 See more

platform-api appscode 2026.9.11

2 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/b3 :v2026.9.11	76d28575b71c	golang.org/x/net@v0.38.0 stdlib@go1.25.3	0.55.0 1.25.13
ghcr.io/appscode/gotenberg :8.25	f9104080d9a7	golang.org/x/net@v0.47.0 stdlib@go1.25.4	0.55.0 1.25.13

Open the chart page →

37,629

platform-linksappscode

2026.9.11

1 of 1 See more

platform-links appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/fileserver :v0.0.2	b1857871e06c	golang.org/x/net@v0.26.0 stdlib@go1.25.4	0.55.0 1.25.13

Open the chart page →

778

prom-label-proxyappscode

2026.7.15

1 of 1 See more

prom-label-proxy appscode 2026.7.15

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/opnpulse/prom-label-proxy :v2026.4.24	61344c13f17d	golang.org/x/net@v0.52.0 stdlib@go1.25.10	0.55.0 1.25.13

Open the chart page →

179

regcacheappscode

2026.9.11

1 of 1 See more

regcache appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/registry :3.1.1	1be55279f18a	golang.org/x/net@v0.52.0 stdlib@go1.25.9	0.55.0 1.25.13

Open the chart page →

641

secrets-store-csi-driver-provider-virtual-secretsappscode

2026.8.14

1 of 1 See more

secrets-store-csi-driver-provider-virtual-secrets appscode 2026.8.14

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/secrets-store-csi-driver-provider-virtual-secrets :v0.2.0	7afb394f9f97	stdlib@go1.25.12	1.25.13

Open the chart page →

553

service-backendappscode

2026.9.11

1 of 1 See more

service-backend appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/service-provider :v0.0.2	f6e481386d70	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.55.0 1.25.13

Open the chart page →

1,337

Container images carrying it

5,259 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
bolkedebruin/rdpgw :master	c0dc0589373a	golang.org/x/net@v0.48.0 stdlib@go1.24.13	0.55.0 1.25.13	1
bonovoo/secrethor :1.1.2	bb93b68fcd17	golang.org/x/net@v0.38.0 stdlib@go1.24.2	0.55.0 1.25.13	1
breton/cool :dev	41b1bb483aa2	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.2	0.55.0 1.25.13	1
bsgrigorov/helm-operator :latest	45ab095f09c8	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb stdlib@go1.15.12	0.55.0 1.25.13	1
btcpayserver/tor :0.4.8.10	e9585b68dc6b	stdlib@go1.16.5	1.25.13	1
buddyspencer/gickup :0.10.38	6b656f19b0c1	golang.org/x/net@v0.37.0 stdlib@go1.22.5	0.55.0 1.25.13	1
buddyspencer/gickup :0.10.30	9e7dbf923c12	golang.org/x/net@v0.24.0 stdlib@go1.21.9	0.55.0 1.25.13	1
buildkite/agent :3.25.0	aec38cfaae0e	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.7	0.55.0 1.25.13	1
bulich/domain-exporter :latest	6d0b780f7c7b	golang.org/x/net@v0.10.0 stdlib@go1.20.4	0.55.0 1.25.13	1
burganbank/vault-initializer :v1	9259c34e4037	golang.org/x/net@v0.23.0 stdlib@go1.22.2	0.55.0 1.25.13	1
burningalchemist/sql_exporter :0.16.0	b8e4757c7def	golang.org/x/net@v0.30.0 stdlib@go1.23.2	0.55.0 1.25.13	1
byjg/static-httpserver :latest	562cc8b9c40b	stdlib@go1.26.1	1.25.13	1
bytebase/bytebase :latest	9fcde38c0d5f	stdlib@go1.26.5	1.25.13	1
bytesafe/bytesafe-ce :v1.0.4	ee287384c005	golang.org/x/net@v0.10.0 stdlib@go1.20.5	0.55.0 1.25.13	1
caarlos0/domain_exporter :v1.23.0	d11dec138900	golang.org/x/net@v0.20.0 stdlib@go1.21.6	0.55.0 1.25.13	1
calico/cni :v3.28.0	cef0c907b8f4	golang.org/x/net@v0.24.0 stdlib@go1.22.2	0.55.0 1.25.13	1
calico/cni :v3.28.1	e486870cfde8	golang.org/x/net@v0.24.0 stdlib@go1.22.5	0.55.0 1.25.13	1
calico/kube-controllers :v3.28.0	8f04e4772a2b	golang.org/x/net@v0.24.0 stdlib@go1.22.3	0.55.0 1.25.13	1
calico/kube-controllers :v3.28.1	eadb3a25109a	golang.org/x/net@v0.24.0 stdlib@go1.22.5	0.55.0 1.25.13	1
calico/node :v3.28.0	385bf6391fea	golang.org/x/net@v0.24.0 stdlib@go1.22.3	0.55.0 1.25.13	1
calico/node :v3.28.1	d8c644a8a3ee	golang.org/x/net@v0.24.0 stdlib@go1.22.5	0.55.0 1.25.13	1
camptocamp/bucket-cloner :latest	acfafc308d88	golang.org/x/net@v0.0.0-20210415231046-e915ea6b2b7d stdlib@go1.16.5	0.55.0 1.25.13	1
captnbp/freebox-exporter :1.0.0-r0	1600c5a253e0	golang.org/x/net@v0.17.0 stdlib@go1.21.3	0.55.0 1.25.13	1
caroga/commentoplusplus :v1.8.7	f3233882b3bd	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.15.15	0.55.0 1.25.13	1
casbin/casdoor :v1.224.0	66f836ef778b	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.5	0.55.0 1.25.13	1
casbin/casdoor :v1.753.0	770ad9ec3190	golang.org/x/net@v0.21.0 stdlib@go1.20.12	0.55.0 1.25.13	1
castopod/castopod :1.12.10	1fd37280cbb2	stdlib@go1.21.13	1.25.13	1
castopod/castopod :1.15.5	4e4f0440520f	golang.org/x/net@v0.50.0 stdlib@go1.25.7	0.55.0 1.25.13	1
cbeneke/hcloud-fip-controller :v0.4.1	dc658078d7ba	golang.org/x/net@v0.0.0-20200114155413-6afb5195e5aa stdlib@go1.15.3	0.55.0 1.25.13	1
censedata/floating-server :v1.6.3	ebfffb9dd4c0	golang.org/x/net@v0.40.0 stdlib@go1.24.3	0.55.0 1.25.13	1
cesanta/docker_auth :1.14.0	98e0307e0d2d	golang.org/x/net@v0.38.0 stdlib@go1.24.4	0.55.0 1.25.13	1
cfcontainerization/cf-operator :v2.3.0-0.g27a91cdf	82fa261c18a8	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7 stdlib@go1.13.3	0.55.0 1.25.13	1
cfcontainerization/quarks-job :v0.0.0-0.g70ae34b	58fb1c173a46	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7 stdlib@go1.13.4	0.55.0 1.25.13	1
cgtysylr/cluster-octopus :1.0.0	aec0f8a38a77	golang.org/x/net@v0.13.0 stdlib@go1.20.8	0.55.0 1.25.13	1
chaerr/kridge :demo-operator-v0.1.2	66833deec017	golang.org/x/net@v0.7.0 stdlib@go1.20.7	0.55.0 1.25.13	1
chainflag/eth-faucet :latest	ac642796bcb6	stdlib@go1.17.13	1.25.13	1
chainsafe/lodestar :latest	5593f6e97912	stdlib@go1.23.1	1.25.13	1
chainsafe/lodestar :v1.27.0	7b9fe4aa8073	stdlib@go1.20.12	1.25.13	1
chandanteekinavar/findery-market-payment-service :1.0	c96f759b6ce4	golang.org/x/net@v0.25.0 stdlib@go1.19.13	0.55.0 1.25.13	1
chaosnative/cle-auth-server :2.7.0	72ee352bc333	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.16.15	0.55.0 1.25.13	1
chaosnative/cle-license-module :2.7.0	62cf6adc355e	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.16.15	0.55.0 1.25.13	1
chaosnative/cle-server :2.7.0	e7bcff4a20c0	golang.org/x/net@v0.0.0-20211118161319-6a13c67c3ce4 stdlib@go1.16.15	0.55.0 1.25.13	1
charmcli/soft-serve :v0.4.0	39523c1a6ba8	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.18.5	0.55.0 1.25.13	1
checkmk/check-mk-community :2.5.0p6	c11b422210c4	golang.org/x/net@v0.53.0 stdlib@go1.26.3	0.55.0 1.25.13	1
chibisafe/chibisafe-server :latest	3da4fcbc1a18	stdlib@go1.20.12	1.25.13	1
chirpstack/chirpstack-application-server :3.17.6	e0b23dfd24d6	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b stdlib@go1.17.8	0.55.0 1.25.13	1
chirpstack/chirpstack-application-server :3	fb7667fe037f	golang.org/x/net@v0.0.0-20220726230323-06994584191e stdlib@go1.19.3	0.55.0 1.25.13	1
chirpstack/chirpstack-gateway-bridge :3.13.2	ce3f2cdca8a9	golang.org/x/net@v0.0.0-20201209123823-ac852fbbde11 stdlib@go1.17.5	0.55.0 1.25.13	1
chirpstack/chirpstack-network-server :3	c0bbbb7a3f1e	golang.org/x/net@v0.8.0 stdlib@go1.19.3	0.55.0 1.25.13	1
chirpstack/chirpstack-network-server :3.16.1	c98d7fe06bce	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb stdlib@go1.17.8	0.55.0 1.25.13	1