StackRadar

CVE-2026-39821

High

Advisory

Published 22 May 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.2
base score, highest
EPSS
0.007
51st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
4,535
of 17,792 indexed, latest versions
Container images
5,293
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: git-lfs security update

Carried by container images the latest versions of 4,535 of 17,792 indexed charts deploy, on 5,293 images.

Affected packageAffected versionsFixed inImages
git-lfsrpm2.13.3-3.el8_60:3.4.1-11.el8_101
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+189 more1.25.135,256
golang.org/x/netgolangv0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+220 more0.55.03,684
OSV records
RHSA-2026:30853GO-2026-5026

Charts affected

4,535 by stars
ChartLatestAffected imagesRadar Score
grafanaappscodeVerified publisher2026.9.111 of 1See more

grafana appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/appscode/grafana:v2025.2.367d18880448c
golang.org/x/net@v0.0.0-20210119194325-5f4716e94777
stdlib@go1.17.1
0.55.0
1.25.13

Open the chart page →

2,340
grafana-operatorappscodeVerified publisher2026.6.121 of 1See more

grafana-operator appscode 2026.6.12

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/appscode/grafana-tools:v0.8.077c9d29080eb
golang.org/x/net@v0.52.0
0.55.0

Open the chart page →

368
inbox-agentappscodeVerified publisher2026.6.22 of 2See more

inbox-agent appscode 2026.6.2

2 of the 2 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/appscode/inbox-agent:v0.0.66b99ee9feece
golang.org/x/net@v0.47.0
stdlib@go1.25.10
0.55.0
1.25.13
ghcr.io/appscode/kube-rbac-proxy:v0.15.0d8cc6ffb9819
golang.org/x/net@v0.17.0
stdlib@go1.21.3
0.55.0
1.25.13

Open the chart page →

2,129
inbox-server-distributedappscodeVerified publisher2025.12.251 of 4See more

inbox-server-distributed appscode 2025.12.25

1 of the 4 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
library/cassandra:4.1.37cbcec0086ac
stdlib@go1.18.2
1.25.13

Open the chart page →

15,718
james-komposeappscodeVerified publisher0.1.01 of 4See more

james-kompose appscode 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
library/cassandra:4.1.37cbcec0086ac
stdlib@go1.18.2
1.25.13

Open the chart page →

17,122
kube-auth-managerappscodeVerified publisher2023.11.141 of 1See more

kube-auth-manager appscode 2023.11.14

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/appscode/kube-auth-manager:v0.0.1789692ab9193
golang.org/x/net@v0.8.0
stdlib@go1.20.2
0.55.0
1.25.13

Open the chart page →

1,946
kube-auth-proxyappscodeVerified publisher2023.11.141 of 1See more

kube-auth-proxy appscode 2023.11.14

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/appscode/kube-auth-manager:v0.0.1789692ab9193
golang.org/x/net@v0.8.0
stdlib@go1.20.2
0.55.0
1.25.13

Open the chart page →

1,946
kubedb-autoscalerappscodeVerified publisher0.51.01 of 1See more

kubedb-autoscaler appscode 0.51.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/kubedb/kubedb-autoscaler:v0.51.05d1182ac21f0
stdlib@go1.25.12
1.25.13

Open the chart page →

519
kubedb-certifiedappscodeVerified publisher2026.7.107 of 8See more

kubedb-certified appscode 2026.7.10

7 of the 8 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/appscode/kubectl-nonroot:1.340b26892cec94
golang.org/x/net@v0.38.0
stdlib@go1.24.13
0.55.0
1.25.13
ghcr.io/appscode/petset:v0.1.093fa0daf603c
golang.org/x/net@v0.47.0
stdlib@go1.25.10
0.55.0
1.25.13
ghcr.io/appscode/sidekick:v0.0.15d1036b07e348
golang.org/x/net@v0.47.0
stdlib@go1.25.11
0.55.0
1.25.13
ghcr.io/kubedb/kubedb-autoscaler:v0.51.05d1182ac21f0
stdlib@go1.25.12
1.25.13
ghcr.io/kubedb/kubedb-crd-manager:v0.21.09506a6cb98d1
stdlib@go1.25.12
1.25.13
ghcr.io/kubedb/kubedb-ops-manager:v0.53.06d4c9fe66e4f
stdlib@go1.25.12
1.25.13
ghcr.io/kubedb/kubedb-webhook-server:v0.42.0f7dcade6523b
stdlib@go1.25.12
1.25.13

Open the chart page →

4,145
kubedb-communityappscodeVerified publisher0.24.21 of 2See more

kubedb-community appscode 0.24.2

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
kubedb/operator:v0.24.01a06ff0bda52
golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781
stdlib@go1.17.6
0.55.0
1.25.13

Open the chart page →

2,557
kubedb-courierappscodeVerified publisher0.6.01 of 1See more

kubedb-courier appscode 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/kubedb/kubedb-courier:v0.6.02f88856584a8
stdlib@go1.25.12
1.25.13

Open the chart page →

278
kubedb-crd-managerappscodeVerified publisher0.21.01 of 1See more

kubedb-crd-manager appscode 0.21.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/kubedb/kubedb-crd-manager:v0.21.09506a6cb98d1
stdlib@go1.25.12
1.25.13

Open the chart page →

503
kubedb-dashboardappscodeVerified publisher0.42.01 of 1See more

kubedb-dashboard appscode 0.42.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/kubedb/kubedb-kibana:v0.42.0735dd5d2709d
stdlib@go1.25.12
1.25.13

Open the chart page →

173
kubedb-enterpriseappscodeVerified publisher0.11.21 of 2See more

kubedb-enterprise appscode 0.11.2

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
kubedb/kubedb-enterprise:v0.11.05829bcedcb0d
golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781
stdlib@go1.17.3
0.55.0
1.25.13

Open the chart page →

2,581
kubedb-gitopsappscodeVerified publisher0.14.01 of 1See more

kubedb-gitops appscode 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/kubedb/kubedb-gitops:v0.14.0c743f8d7a199
stdlib@go1.25.12
1.25.13

Open the chart page →

467
kubedb-migratorappscodeVerified publisher0.5.01 of 1See more

kubedb-migrator appscode 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/kubedb/migrator-operator:v0.5.098ffb48f5b60
stdlib@go1.25.11
1.25.13

Open the chart page →

290
kubedb-oneappscodeVerified publisher2023.12.289 of 10See more

kubedb-one appscode 2023.12.28

9 of the 10 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
prom/pushgateway:v1.4.2a684e7c830a4
golang.org/x/net@v0.0.0-20210525063256-abc453219eb5
stdlib@go1.16.9
0.55.0
1.25.13
ghcr.io/kubedb/kubedb-autoscaler:v0.25.0df6b11907d33
golang.org/x/net@v0.17.0
stdlib@go1.21.5
0.55.0
1.25.13
ghcr.io/kubedb/kubedb-dashboard:v0.16.07bfe1c07bd9b
golang.org/x/net@v0.17.0
stdlib@go1.20.7
0.55.0
1.25.13
ghcr.io/kubedb/kubedb-ops-manager:v0.27.1ec36422b09af
golang.org/x/net@v0.17.0
stdlib@go1.20.14
0.55.0
1.25.13
ghcr.io/kubedb/kubedb-provisioner:v0.40.242574f512837
golang.org/x/net@v0.17.0
stdlib@go1.20.14
0.55.0
1.25.13
ghcr.io/kubedb/kubedb-schema-manager:v0.16.09518de37eed5
golang.org/x/net@v0.17.0
stdlib@go1.20.7
0.55.0
1.25.13
ghcr.io/kubedb/kubedb-webhook-server:v0.16.2e24894e32cbc
golang.org/x/net@v0.17.0
stdlib@go1.20.14
0.55.0
1.25.13
ghcr.io/stashed/stash-crd-installer:v0.32.0c6f2a844b5dd
golang.org/x/net@v0.15.0
stdlib@go1.20.8
0.55.0
1.25.13
ghcr.io/stashed/stash-enterprise:v0.32.0e9bde36e34b7
golang.org/x/net@v0.15.0
stdlib@go1.20.7
0.55.0
1.25.13

Open the chart page →

15,265
kubedb-ops-managerappscodeVerified publisher0.53.01 of 1See more

kubedb-ops-manager appscode 0.53.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/kubedb/kubedb-ops-manager:v0.53.06d4c9fe66e4f
stdlib@go1.25.12
1.25.13

Open the chart page →

572
kubedb-provider-awsappscodeVerified publisher2026.7.101 of 1See more

kubedb-provider-aws appscode 2026.7.10

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/kubedb/provider-aws:v0.27.049b1c312e342
golang.org/x/net@v0.7.0
stdlib@go1.20.7
0.55.0
1.25.13

Open the chart page →

2,534
kubedb-provider-azureappscodeVerified publisher2026.7.101 of 1See more

kubedb-provider-azure appscode 2026.7.10

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/kubedb/provider-azure:v0.27.0aa0c8526ae5e
golang.org/x/net@v0.0.0-20220927171203-f486391704dc
stdlib@go1.19.3
0.55.0
1.25.13

Open the chart page →

2,712
kubedb-provider-gcpappscodeVerified publisher2026.7.102 of 2See more

kubedb-provider-gcp appscode 2026.7.10

2 of the 2 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/appscode/kubectl-nonroot:1.340b26892cec94
golang.org/x/net@v0.38.0
stdlib@go1.24.13
0.55.0
1.25.13
ghcr.io/kubedb/provider-gcp:v0.27.0a1d4cf8b8fe1
golang.org/x/net@v0.23.0
stdlib@go1.19.1
0.55.0
1.25.13

Open the chart page →

3,040
kubedb-schema-managerappscodeVerified publisher0.42.01 of 1See more

kubedb-schema-manager appscode 0.42.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/kubedb/kubedb-schema-manager:v0.42.04e2a3cce7ce8
stdlib@go1.25.12
1.25.13

Open the chart page →

170
kubedb-ui-serverappscodeVerified publisher2021.12.211 of 1See more

kubedb-ui-server appscode 2021.12.21

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
kubedb/kubedb-ui-server:v0.0.1_linux_amd647d27865514ee
golang.org/x/net@v0.0.0-20210614182718-04defd469f4e
stdlib@go1.17.8
0.55.0
1.25.13

Open the chart page →

2,054
kubedb-webhook-serverappscodeVerified publisher0.42.01 of 1See more

kubedb-webhook-server appscode 0.42.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/kubedb/kubedb-webhook-server:v0.42.0f7dcade6523b
stdlib@go1.25.12
1.25.13

Open the chart page →

476
kubeform-provider-awsappscodeVerified publisher2023.11.11 of 1See more

kubeform-provider-aws appscode 2023.11.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/kubeform/provider-aws:v0.0.1e3d1f1302e49
golang.org/x/net@v0.10.0
stdlib@go1.19.1
0.55.0
1.25.13

Open the chart page →

2,803
kubeform-provider-azureappscodeVerified publisher2023.11.11 of 1See more

kubeform-provider-azure appscode 2023.11.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/kubeform/provider-azure:v0.0.1ac8459f70f85
golang.org/x/net@v0.0.0-20220927171203-f486391704dc
stdlib@go1.20.5
0.55.0
1.25.13

Open the chart page →

2,724
kubeform-provider-gcpappscodeVerified publisher2023.11.11 of 1See more

kubeform-provider-gcp appscode 2023.11.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/kubeform/provider-gcp:v0.0.1af77073c184f
golang.org/x/net@v0.9.0
stdlib@go1.19.9
0.55.0
1.25.13

Open the chart page →

2,750
kubestashappscodeVerified publisher2026.7.102 of 2See more

kubestash appscode 2026.7.10

2 of the 2 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/appscode/kubectl-nonroot:1.340b26892cec94
golang.org/x/net@v0.38.0
stdlib@go1.24.13
0.55.0
1.25.13
ghcr.io/kubestash/kubestash:v0.29.043e01ed32486
golang.org/x/net@v0.47.0
stdlib@go1.25.5
0.55.0
1.25.13

Open the chart page →

1,098
kubestash-certifiedappscodeVerified publisher2026.7.102 of 2See more

kubestash-certified appscode 2026.7.10

2 of the 2 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/appscode/kubectl-nonroot:1.340b26892cec94
golang.org/x/net@v0.38.0
stdlib@go1.24.13
0.55.0
1.25.13
ghcr.io/kubestash/kubestash:v0.29.043e01ed32486
golang.org/x/net@v0.47.0
stdlib@go1.25.5
0.55.0
1.25.13

Open the chart page →

1,098
kubestash-operatorappscodeVerified publisher0.29.02 of 2See more

kubestash-operator appscode 0.29.0

2 of the 2 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/appscode/kubectl-nonroot:1.340b26892cec94
golang.org/x/net@v0.38.0
stdlib@go1.24.13
0.55.0
1.25.13
ghcr.io/kubestash/kubestash:v0.29.043e01ed32486
golang.org/x/net@v0.47.0
stdlib@go1.25.5
0.55.0
1.25.13

Open the chart page →

1,098
kubevaultappscodeVerified publisher2026.8.72 of 2See more

kubevault appscode 2026.8.7

2 of the 2 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/appscode/kubectl-nonroot:1.340b26892cec94
golang.org/x/net@v0.38.0
stdlib@go1.24.13
0.55.0
1.25.13
ghcr.io/kubevault/vault-operator:v0.25.0c8e042b5cee8
stdlib@go1.25.12
1.25.13

Open the chart page →

806
kubevault-certifiedappscodeVerified publisher2026.2.271 of 1See more

kubevault-certified appscode 2026.2.27

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/kubevault/vault-operator:v0.24.00087cb49616f
golang.org/x/net@v0.48.0
stdlib@go1.25.9
0.55.0
1.25.13

Open the chart page →

1,129
kubevault-operatorappscodeVerified publisher0.25.01 of 1See more

kubevault-operator appscode 0.25.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/kubevault/vault-operator:v0.25.0c8e042b5cee8
stdlib@go1.25.12
1.25.13

Open the chart page →

504
kubevault-webhook-serverappscodeVerified publisher0.25.02 of 2See more

kubevault-webhook-server appscode 0.25.0

2 of the 2 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/appscode/kubectl-nonroot:1.340b26892cec94
golang.org/x/net@v0.38.0
stdlib@go1.24.13
0.55.0
1.25.13
ghcr.io/kubevault/vault-operator:v0.25.0c8e042b5cee8
stdlib@go1.25.12
1.25.13

Open the chart page →

806
kubevirt-infra-csi-driverappscodeVerified publisher0.1.05 of 6See more

kubevirt-infra-csi-driver appscode 0.1.0

5 of the 6 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
quay.io/kubevirt/kubevirt-csi-driver:latest7b31b21b3f1e
golang.org/x/net@v0.49.0
stdlib@go1.24.13
0.55.0
1.25.13
quay.io/openshift/origin-csi-external-attacher:latest4f9b3d0f2c7f
stdlib@go1.26.5
1.25.13
quay.io/openshift/origin-csi-external-provisioner:lateste4074ec254f5
stdlib@go1.26.5
1.25.13
quay.io/openshift/origin-csi-livenessprobe:lateste9236513d24a
stdlib@go1.26.5
1.25.13
registry.k8s.io/sig-storage/csi-resizer:v1.13.12a0b297cc7c4
golang.org/x/net@v0.34.0
stdlib@go1.23.1
0.55.0
1.25.13

Open the chart page →

1,209
kubevirt-tenant-csi-driverappscodeVerified publisher0.1.04 of 4See more

kubevirt-tenant-csi-driver appscode 0.1.0

4 of the 4 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
quay.io/kubevirt/kubevirt-csi-driver:latest7b31b21b3f1e
golang.org/x/net@v0.49.0
stdlib@go1.24.13
0.55.0
1.25.13
quay.io/openshift/origin-csi-livenessprobe:lateste9236513d24a
stdlib@go1.26.5
1.25.13
quay.io/openshift/origin-csi-node-driver-registrar:latestea08b5e5f4ab
stdlib@go1.26.5
1.25.13
registry.k8s.io/sig-storage/snapshot-controller:v6.3.1ce6ca3c0e30b
golang.org/x/net@v0.17.0
stdlib@go1.20.5
0.55.0
1.25.13

Open the chart page →

1,297
license-proxyserverappscodeVerified publisher2026.2.161 of 1See more

license-proxyserver appscode 2026.2.16

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/appscode/license-proxyserver:v0.1.1e192ad567e0b
golang.org/x/net@v0.47.0
stdlib@go1.25.7
0.55.0
1.25.13

Open the chart page →

1,113
license-proxyserver-addon-managerappscodeVerified publisher2024.2.251 of 1See more

license-proxyserver-addon-manager appscode 2024.2.25

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/appscode/license-proxyserver:v0.0.8d6c2532ea386
golang.org/x/net@v0.19.0
stdlib@go1.22.1
0.55.0
1.25.13

Open the chart page →

1,391
license-proxyserver-managerappscodeVerified publisher2026.2.161 of 1See more

license-proxyserver-manager appscode 2026.2.16

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/appscode/license-proxyserver:v0.1.1e192ad567e0b
golang.org/x/net@v0.47.0
stdlib@go1.25.7
0.55.0
1.25.13

Open the chart page →

1,113
managed-serviceaccountappscodeVerified publisher2024.2.251 of 1See more

managed-serviceaccount appscode 2024.2.25

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/kluster-manager/managed-serviceaccount:latest365183f83ac9
golang.org/x/net@v0.19.0
stdlib@go1.22.0
0.55.0
1.25.13

Open the chart page →

2,404
managed-serviceaccount-managerappscodeVerified publisher2026.2.161 of 1See more

managed-serviceaccount-manager appscode 2026.2.16

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/kluster-manager/managed-serviceaccount:v0.10.0fc256885915b
golang.org/x/net@v0.49.0
stdlib@go1.25.8
0.55.0
1.25.13

Open the chart page →

912
marketplace-apiappscodeVerified publisher2026.9.111 of 1See more

marketplace-api appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
golang.org/x/net@v0.38.0
stdlib@go1.25.3
0.55.0
1.25.13

Open the chart page →

2,655
minioappscodeVerified publisher2026.9.111 of 1See more

minio appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2023-01-12T02-06-16Zfc6bedc99355
golang.org/x/net@v0.5.0
stdlib@go1.19.4
0.55.0
1.25.13

Open the chart page →

4,050
monitoring-operatorappscodeVerified publisher2026.6.121 of 1See more

monitoring-operator appscode 2026.6.12

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/appscode/grafana-tools:v0.8.077c9d29080eb
golang.org/x/net@v0.52.0
0.55.0

Open the chart page →

368
multicluster-controlplaneappscodeVerified publisher2025.4.301 of 1See more

multicluster-controlplane appscode 2025.4.30

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/kluster-manager/multicluster-controlplane:latest6de40f528be9
golang.org/x/net@v0.19.0
stdlib@go1.21.8
0.55.0
1.25.13

Open the chart page →

2,575
multicluster-ingress-readerappscodeVerified publisher2024.7.101 of 1See more

multicluster-ingress-reader appscode 2024.7.10

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/appscode/kubectl-nonroot:1.340b26892cec94
golang.org/x/net@v0.38.0
stdlib@go1.24.13
0.55.0
1.25.13

Open the chart page →

302
offline-license-serverappscodeVerified publisher2026.9.111 of 2See more

offline-license-server appscode 2026.9.11

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/appscode/offline-license-server:v0.0.76e4b66308d8f6
golang.org/x/net@v0.47.0
stdlib@go1.25.5
0.55.0
1.25.13

Open the chart page →

1,690
opentelemetry-kube-stackappscodeVerified publisher0.14.123 of 3See more

opentelemetry-kube-stack appscode 0.14.12

3 of the 3 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
rancher/kubectl:v1.34.1090bef429ed1
golang.org/x/net@v0.38.0
stdlib@go1.24.6
0.55.0
1.25.13
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.144.079b81912f1fb
golang.org/x/net@v0.48.0
stdlib@go1.25.6
0.55.0
1.25.13
quay.io/brancz/kube-rbac-proxy:v0.20.0147cb28fea35
golang.org/x/net@v0.44.0
stdlib@go1.25.1
0.55.0
1.25.13

Open the chart page →

1,886
operator-shard-managerappscodeVerified publisher2026.6.221 of 1See more

operator-shard-manager appscode 2026.6.22

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/appscode/operator-shard-manager:v0.0.64a16c6ccecb8
golang.org/x/net@v0.53.0
stdlib@go1.25.11
0.55.0
1.25.13

Open the chart page →

418
panopticonappscodeVerified publisher2026.6.222 of 2See more

panopticon appscode 2026.6.22

2 of the 2 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/appscode/kubectl-nonroot:1.340b26892cec94
golang.org/x/net@v0.38.0
stdlib@go1.24.13
0.55.0
1.25.13
ghcr.io/appscode/panopticon:v0.0.23a645b40d2d3b
stdlib@go1.25.11
1.25.13

Open the chart page →

475

Container images carrying it

5,293 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
conduction/betaalservice-php:latestece1ab544c57
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
stdlib@go1.13.10
0.55.0
1.25.13
1
conduction/cgrc-php:dev25415534d245
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
stdlib@go1.13.10
0.55.0
1.25.13
1
conduction/checkin-component-php:dev3423845692c1
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
stdlib@go1.13.10
0.55.0
1.25.13
1
conduction/conduction-ui-php:dev2744565516e8
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
stdlib@go1.13.10
0.55.0
1.25.13
1
conduction/contactmoment-component-php:deve1d4ad1e22a8
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
stdlib@go1.13.10
0.55.0
1.25.13
1
conduction/docparser-php:devb6f95c8ead7d
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
stdlib@go1.13.10
0.55.0
1.25.13
1
conduction/kvk-php:dev8f177f9f8a7b
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
stdlib@go1.13.10
0.55.0
1.25.13
1
conduction/pan-php:dev24f03c57568f
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
stdlib@go1.13.10
0.55.0
1.25.13
1
confluentinc/cp-kafka:latest0ad069035863
stdlib@go1.26.5
1.25.13
1
confluentinc/cp-schema-registry:latestf0cfd047a839
stdlib@go1.26.5
1.25.13
1
consensys/web3signer:latestf146a51a1ba3
golang.org/x/net@v0.40.0
stdlib@go1.26.4
0.55.0
1.25.13
1
containous/maesh:v1.3.2587162516502
golang.org/x/net@v0.0.0-20200301022130-244492dfa37a
stdlib@go1.14.4
0.55.0
1.25.13
1
contentsquareplatform/chproxy:v1.26.524555f22d4be
golang.org/x/net@v0.23.0
stdlib@go1.22.7
0.55.0
1.25.13
1
coordimap/coordimap-agent:latest7748fd0fae9f
golang.org/x/net@v0.38.0
stdlib@go1.26.4
0.55.0
1.25.13
1
coredns/coredns:1.12.040384aa1f5ea
golang.org/x/net@v0.31.0
stdlib@go1.23.3
0.55.0
1.25.13
1
coredns/coredns:1.7.073ca82b4ce82
golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e
stdlib@go1.14.4
0.55.0
1.25.13
1
coredns/coredns:1.14.6900f9c109f7a
stdlib@go1.26.5
1.25.13
1
coredns/coredns:1.10.1a0ead06651cf
golang.org/x/net@v0.4.0
stdlib@go1.20
0.55.0
1.25.13
1
cortezaproject/corteza:2024.9.60bcdcbcd3c63
golang.org/x/net@v0.33.0
stdlib@go1.24.1
0.55.0
1.25.13
1
cortezaproject/corteza:2024.9.08eb7a26605c9
golang.org/x/net@v0.21.0
stdlib@go1.19.13
0.55.0
1.25.13
1
cortezaproject/corteza:2024.9.4cb9f200de5d2
golang.org/x/net@v0.33.0
stdlib@go1.24.1
0.55.0
1.25.13
1
cortezaproject/corteza-server-corredor:2024.9.44ea78dfe5364
stdlib@go1.23.5
1.25.13
1
couchbase/admission-controller:2.9.3bf2d2e87e45f
golang.org/x/net@v0.43.0
stdlib@go1.26.5
0.55.0
1.25.13
1
couchbase/operator:2.9.369a385b49e1f
golang.org/x/net@v0.43.0
stdlib@go1.26.5
0.55.0
1.25.13
1
countly/api:25.05.4f4cc7447c4f5
stdlib@go1.19.4
1.25.13
1
countly/countly-server:25.05.4e3c238248f99
stdlib@go1.21.11
1.25.13
1
countly/frontend:25.05.42acbc11499b6
stdlib@go1.19.4
1.25.13
1
craftypath/sops-operator:v0.8.0402a0024c732
golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b
stdlib@go1.16.5
0.55.0
1.25.13
1
crossplane/crossplane:v0.12.066666e6963af
golang.org/x/net@v0.0.0-20200202094626-16171245cfb2
stdlib@go1.14.4
0.55.0
1.25.13
1
crossplane/oam-kubernetes-runtime:v0.0.3-71.g0f235900112171c45e3
golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b
stdlib@go1.13.14
0.55.0
1.25.13
1
crossplane/oam-kubernetes-runtime:v0.3.1-5.g11e189407b8b410dc76
golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7
stdlib@go1.13.15
0.55.0
1.25.13
1
crowdfox/external-service-operator:v1.1.06fa7e8063d27
golang.org/x/net@v0.0.0-20190620200207-3b0461eec859
stdlib@go1.14.2
0.55.0
1.25.13
1
csepulvedab/secret-sync:0.5227a6f2b0ff8
golang.org/x/net@v0.0.0-20220722155237-a158d28d115b
stdlib@go1.19.4
0.55.0
1.25.13
1
csiplugin/csi-neonsan:v1.2.21fa83d45417f
golang.org/x/net@v0.0.0-20191112182307-2180aed22343
stdlib@go1.14.4
0.55.0
1.25.13
1
csiplugin/snapshot-controller:v4.0.000fcc441ea9f
golang.org/x/net@v0.0.0-20201209123823-ac852fbbde11
stdlib@go1.15
0.55.0
1.25.13
1
ctrox/csi-s3:v1.2.0-rc.23c72862bea3c
golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f
stdlib@go1.16.13
0.55.0
1.25.13
1
cube8021/push-to-k8s:v1.1.21be9baf096ff
golang.org/x/net@v0.26.0
stdlib@go1.22.4
0.55.0
1.25.13
1
cyberark/conjur-k8s-csi-provider:latest737a967088d9
golang.org/x/net@v0.54.0
stdlib@go1.26.5
0.55.0
1.25.13
1
cybrarist/discount-bandit:v4.0.4e9e2447ac666
golang.org/x/net@v0.43.0
stdlib@go1.25.4
0.55.0
1.25.13
1
czerwonk/ping_exporter:v1.1.394f51e1ef1e2
golang.org/x/net@v0.22.0
stdlib@go1.22.1
0.55.0
1.25.13
1
dabealu/zookeeper-exporter:latest86106fec315f
stdlib@go1.14.15
1.25.13
1
dagster/dagster-cloud-agent:1.13.2322036fc83927
stdlib@go1.25.7
1.25.13
1
dalf/filtron:latestb19cbf5b2f37
stdlib@go1.18.2
1.25.13
1
dalf/morty:latest248a4849c350
golang.org/x/net@v0.0.0-20220421235706-1d1ef9303861
stdlib@go1.18.2
0.55.0
1.25.13
1
danielfm/kube-ecr-cleanup-controller:0.1.1012485563b1d0
golang.org/x/net@v0.7.0
stdlib@go1.19.6
0.55.0
1.25.13
1
danielqsj/kafka-exporter:v1.7.0e90b7ba06d97
golang.org/x/net@v0.10.0
stdlib@go1.20.4
0.55.0
1.25.13
1
dannielkil/book-db:latest433290c5c1db
stdlib@go1.18.2
1.25.13
1
danuk/k8s-sftp-gcs:latestdd0e6585c44f
stdlib@go1.18.4
1.25.13
1
daprio/dashboard:0.15.04be696707bd1
golang.org/x/net@v0.25.0
stdlib@go1.21.13
0.55.0
1.25.13
1
daprio/dashboard:0.14.07ba5d51e5b97
golang.org/x/net@v0.6.0
stdlib@go1.19.13
0.55.0
1.25.13
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.