CVE-2026-39821

High

Advisory

Published 22 May 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 8.2; base score, highest
EPSS: 0.007; 51st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 4,535; of 17,792 indexed, latest versions
Container images: 5,293; deployed by those charts
Fix available: 3 of 3; affected packages

Red Hat Security Advisory: git-lfs security update

Carried by container images the latest versions of 4,535 of 17,792 indexed charts deploy, on 5,293 images.

Affected package	Affected versions	Fixed in	Images
git-lfsrpm	2.13.3-3.el8_6	0:3.4.1-11.el8_10	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+189 more	1.25.13	5,256
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+220 more	0.55.0	3,684

OSV records: RHSA-2026:30853 GO-2026-5026

Charts affected

4,535 by stars

Chart

Latest

Affected images

Radar Score

ddosifyanteon

1.7.5

5 of 13 See more

ddosify anteon 1.7.5

5 of the 13 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
chrislusf/seaweedfs :3.56	ed80f00fde46	golang.org/x/net@v0.14.0 stdlib@go1.20.8	0.55.0 1.25.13
ddosify/selfhosted_hammer :1.4.2	a97a1b8a66af	golang.org/x/net@v0.8.0 stdlib@go1.18.1	0.55.0 1.25.13
library/influxdb :2.6.1-alpine	44a366dd7724	golang.org/x/net@v0.0.0-20220617184016-355a448f1bc9 stdlib@go1.19.4	0.55.0 1.25.13
library/redis :7.2.4-alpine	c8bb255c3559	stdlib@go1.18.2	1.25.13
prom/prometheus :v2.37.9	8176adea328e	golang.org/x/net@v0.7.0 stdlib@go1.19.11	0.55.0 1.25.13

Open the chart page →

26,070

antmediaantmedia

3.1.0

3 of 4 See more

antmedia antmedia 3.1.0

3 of the 4 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/mongo :8.0	02a0cc7939f5	stdlib@go1.26.5	1.25.13
registry.k8s.io/ingress-nginx/controller :v1.5.1	4ba73c697770	golang.org/x/net@v0.1.0 stdlib@go1.19.2	0.55.0 1.25.13
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20220916-gd32f8c343	39c5b2e3310d	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.19.1	0.55.0 1.25.13

Open the chart page →

4,631

ingress-nginxantmedia

4.4.0

2 of 2 See more

ingress-nginx antmedia 4.4.0

2 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/controller :v1.5.1	4ba73c697770	golang.org/x/net@v0.1.0 stdlib@go1.19.2	0.55.0 1.25.13
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20220916-gd32f8c343	39c5b2e3310d	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.19.1	0.55.0 1.25.13

Open the chart page →

3,323

monitoringantmedia

1.0.0

1 of 6 See more

monitoring antmedia 1.0.0

1 of the 6 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
grafana/grafana :latest	f772d434e8fa	golang.org/x/net@v0.51.0 stdlib@go1.26.5	0.55.0 1.25.13

Open the chart page →

2,461

nfs-server-provisioneranvibo

1.3.0

1 of 1 See more

nfs-server-provisioner anvibo 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
gcr.io/k8s-staging-sig-storage/nfs-provisioner :v3.0.0	2de1d15fc1f2	golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc stdlib@go1.15	0.55.0 1.25.13

Open the chart page →

2,731

glauthanza-labs

1.0.1

1 of 1 See more

glauth anza-labs 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/glauth/glauth :v2.5.2	09c782ca5984	golang.org/x/net@v0.17.0 stdlib@go1.25.0	0.55.0 1.25.13

Open the chart page →

1,309

apipingapiping

1.5.0

1 of 1 See more

apiping apiping 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
udhos/apiping :1.5.0	41ab9bae6f3b	golang.org/x/net@v0.47.0 stdlib@go1.25.4	0.55.0 1.25.13

Open the chart page →

1,139

apishiftapishift

0.3.0

1 of 4 See more

apishift apishift 0.3.0

1 of the 4 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
quay.io/everythingascode/apishift-backend :v0.3.0	14ff275b2e61	golang.org/x/net@v0.25.0 stdlib@go1.23.6	0.55.0 1.25.13

Open the chart page →

2,962

api-usage-cleanerapi-usage-cleaner

1.16.0

1 of 1 See more

api-usage-cleaner api-usage-cleaner 1.16.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/api-usage-cleaner :1.16.0	d47f43484055	stdlib@go1.23.12	1.25.13

Open the chart page →

596

d.vazquezm.2021_helmapphelm

1.0.0

2 of 6 See more

d.vazquezm.2021_helm apphelm 1.0.0

2 of the 6 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/mongo :5.0.6-focal	8e70544b6c76	stdlib@go1.16.7	1.25.13
library/mysql :8.0.28	fc77d54cacef	stdlib@go1.16.7	1.25.13

Open the chart page →

19,799

app-mobilityappmo

0.1.0

3 of 5 See more

app-mobility appmo 0.1.0

3 of the 5 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
dellemc/csm-application-mobility-controller :v0.1.0	148ada9060a9	golang.org/x/net@v0.0.0-20220822230855-b0a4917ee28c stdlib@go1.18.5	0.55.0 1.25.13
dellemc/csm-application-mobility-velero-plugin :v0.1.0	660cabd6d929	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18.5	0.55.0 1.25.13
velero/velero :v1.8.1	8d784580931c	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.16.6	0.55.0 1.25.13

Open the chart page →

12,542

app-movies-seriesapp-movies-series

0.1.0

1 of 2 See more

app-movies-series app-movies-series 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/postgres :14.3	2d1e636f0778	stdlib@go1.16.7	1.25.13

Open the chart page →

3,168

accounts-uiappscode

2026.9.11

1 of 1 See more

accounts-ui appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/b3 :v2026.9.11	76d28575b71c	golang.org/x/net@v0.38.0 stdlib@go1.25.3	0.55.0 1.25.13

Open the chart page →

2,660

aceappscode

2026.9.11

2 of 2 See more

ace appscode 2026.9.11

2 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/b3 :v2026.9.11	76d28575b71c	golang.org/x/net@v0.38.0 stdlib@go1.25.3	0.55.0 1.25.13
ghcr.io/appscode/kubectl-nonroot :1.34	0b26892cec94	golang.org/x/net@v0.38.0 stdlib@go1.24.13	0.55.0 1.25.13

Open the chart page →

2,962

ace-installerappscode

2026.9.11

2 of 2 See more

ace-installer appscode 2026.9.11

2 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/registry :3.1.1	1be55279f18a	golang.org/x/net@v0.52.0 stdlib@go1.25.9	0.55.0 1.25.13
ghcr.io/appscode/b3 :v2026.9.11	76d28575b71c	golang.org/x/net@v0.38.0 stdlib@go1.25.3	0.55.0 1.25.13

Open the chart page →

3,301

ace-installer-certifiedappscode

2026.9.11

2 of 2 See more

ace-installer-certified appscode 2026.9.11

2 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/registry :3.1.1	1be55279f18a	golang.org/x/net@v0.52.0 stdlib@go1.25.9	0.55.0 1.25.13
ghcr.io/appscode/b3 :v2026.9.11	76d28575b71c	golang.org/x/net@v0.38.0 stdlib@go1.25.3	0.55.0 1.25.13

Open the chart page →

3,301

acerproxyappscode

2026.9.11

1 of 1 See more

acerproxy appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/acerproxy :v0.2.0	21de3771fdd5	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.55.0 1.25.13

Open the chart page →

1,323

aceshifterappscode

2026.9.11

1 of 1 See more

aceshifter appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/aceshifter :v0.0.3	e5f5c254a55a	golang.org/x/net@v0.47.0 stdlib@go1.25.8	0.55.0 1.25.13

Open the chart page →

1,038

appscode-otel-stackappscode

2026.7.15

3 of 3 See more

appscode-otel-stack appscode 2026.7.15

3 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
rancher/kubectl :v1.34.1	090bef429ed1	golang.org/x/net@v0.38.0 stdlib@go1.24.6	0.55.0 1.25.13
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator :0.150.0	89490ef63b72	golang.org/x/net@v0.52.0 stdlib@go1.26.2	0.55.0 1.25.13
quay.io/brancz/kube-rbac-proxy :v0.20.0	147cb28fea35	golang.org/x/net@v0.44.0 stdlib@go1.25.1	0.55.0 1.25.13

Open the chart page →

1,435

auditorappscode

2023.10.1

1 of 1 See more

auditor appscode 2023.10.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/auditor :v0.0.1	c62c89ee706d	golang.org/x/net@v0.0.0-20220531201128-c960675eff93 stdlib@go1.19.4	0.55.0 1.25.13

Open the chart page →

1,680

aws-credential-managerappscode

2026.4.16

1 of 1 See more

aws-credential-manager appscode 2026.4.16

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/aws-credential-manager :v0.1.0	0511bbe501c3	golang.org/x/net@v0.53.0 stdlib@go1.25.9	0.55.0 1.25.13

Open the chart page →

612

azure-credential-managerappscode

2026.4.16

1 of 1 See more

azure-credential-manager appscode 2026.4.16

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/azure-credential-manager :v0.1.0	f5c797f7fbe7	golang.org/x/net@v0.49.0 stdlib@go1.25.9	0.55.0 1.25.13

Open the chart page →

879

billingappscode

2026.9.11

1 of 1 See more

billing appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/b3 :v2026.9.11	76d28575b71c	golang.org/x/net@v0.38.0 stdlib@go1.25.3	0.55.0 1.25.13

Open the chart page →

2,660

capa-vpc-peering-operatorappscode

2023.12.11

1 of 1 See more

capa-vpc-peering-operator appscode 2023.12.11

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/capa-vpc-peering-operator :v0.0.4	b1557553a2b3	golang.org/x/net@v0.17.0 stdlib@go1.21.5	0.55.0 1.25.13

Open the chart page →

1,433

capi-ops-managerappscode

2024.8.14

2 of 2 See more

capi-ops-manager appscode 2024.8.14

2 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/capi-ops-manager :v0.0.5	7465f35b684c	golang.org/x/net@v0.33.0 stdlib@go1.23.2	0.55.0 1.25.13
ghcr.io/appscode/kube-rbac-proxy :v0.11.0	0df4ae70e3bd	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15.14	0.55.0 1.25.13

Open the chart page →

3,430

cattlesetappscode

2026.7.8

1 of 1 See more

cattleset appscode 2026.7.8

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/cattleset :v0.0.1	45554a03e448	golang.org/x/net@v0.47.0 stdlib@go1.25.11	0.55.0 1.25.13

Open the chart page →

625

cert-manager-csi-driver-cacertsappscode

2026.1.15

3 of 3 See more

cert-manager-csi-driver-cacerts appscode 2026.1.15

3 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/csi-driver-cacerts :v0.5.0	b6bf1888f9d5	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.55.0 1.25.13
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.14.0	5244abbe87e0	golang.org/x/net@v0.40.0 stdlib@go1.24.2	0.55.0 1.25.13
registry.k8s.io/sig-storage/livenessprobe :v2.16.0	88092d100909	golang.org/x/net@v0.40.0 stdlib@go1.24.2	0.55.0 1.25.13

Open the chart page →

3,468

cert-manager-webhook-aceappscode

2026.9.11

1 of 1 See more

cert-manager-webhook-ace appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/cert-manager-webhook-ace :v0.0.2	dc6b5fdcec06	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.55.0 1.25.13

Open the chart page →

1,316

cluster-auth-agentappscode

2026.2.16

1 of 1 See more

cluster-auth-agent appscode 2026.2.16

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/kluster-manager/cluster-auth :v0.5.1	fba6fb872281	golang.org/x/net@v0.47.0 stdlib@go1.25.7	0.55.0 1.25.13

Open the chart page →

985

cluster-auth-managerappscode

2026.2.16

1 of 1 See more

cluster-auth-manager appscode 2026.2.16

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/kluster-manager/cluster-auth :v0.5.1	fba6fb872281	golang.org/x/net@v0.47.0 stdlib@go1.25.7	0.55.0 1.25.13

Open the chart page →

985

cluster-connectorappscode

2025.12.15

1 of 1 See more

cluster-connector appscode 2025.12.15

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/cluster-connector :v0.0.14	0efd9d9ef6ca	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.55.0 1.25.13

Open the chart page →

619

cluster-gatewayappscode

2026.6.26

1 of 1 See more

cluster-gateway appscode 2026.6.26

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/kluster-manager/cluster-gateway :v1.12.1	58bed8d1e7fc	golang.org/x/net@v0.47.0 stdlib@go1.25.11	0.55.0 1.25.13

Open the chart page →

647

cluster-gateway-managerappscode

2026.6.26

1 of 1 See more

cluster-gateway-manager appscode 2026.6.26

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/kluster-manager/cluster-gateway-manager :v1.12.1	f22cae0e6cf3	golang.org/x/net@v0.47.0 stdlib@go1.25.11	0.55.0 1.25.13

Open the chart page →

647

cluster-importerappscode

2026.9.11

1 of 1 See more

cluster-importer appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/ace :v0.2.0	b8e03da90e70	golang.org/x/net@v0.47.0 stdlib@go1.25.9	0.55.0 1.25.13

Open the chart page →

1,039

cluster-manager-hubappscode

2026.2.16

1 of 1 See more

cluster-manager-hub appscode 2026.2.16

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/kluster-manager/registration-operator :v1.2.0	0cbced8e6240	golang.org/x/net@v0.47.0 stdlib@go1.25.7	0.55.0 1.25.13

Open the chart page →

1,063

cluster-presetsappscode

2026.9.11

1 of 1 See more

cluster-presets appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/cluster-presets :v0.0.12	8fbdd2479645	stdlib@go1.25.11	1.25.13

Open the chart page →

340

cluster-proxyappscode

2024.2.25

1 of 1 See more

cluster-proxy appscode 2024.2.25

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/kluster-manager/cluster-proxy :latest	27a5c64b7ea8	golang.org/x/net@v0.20.0 stdlib@go1.21.8	0.55.0 1.25.13

Open the chart page →

1,126

cluster-proxy-managerappscode

2026.6.26

1 of 1 See more

cluster-proxy-manager appscode 2026.6.26

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/kluster-manager/cluster-proxy :v0.10.1	a7fce69e171c	golang.org/x/net@v0.47.0 stdlib@go1.25.11	0.55.0 1.25.13

Open the chart page →

1,472

crd-managerappscode

2026.7.21

1 of 1 See more

crd-manager appscode 2026.7.21

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/voyagermesh/crd-manager :v0.3.0	e67f14e5c853	golang.org/x/net@v0.47.0 stdlib@go1.25.12	0.55.0 1.25.13

Open the chart page →

797

dns-proxyappscode

2026.9.11

1 of 1 See more

dns-proxy appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/cloudflare-dns-proxy :v0.0.5	dfbef0285e14	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.55.0 1.25.13

Open the chart page →

648

docker-machine-operatorappscode

2024.7.9

1 of 1 See more

docker-machine-operator appscode 2024.7.9

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/docker-machine-operator :v0.0.4	81f6007abb4e	golang.org/x/net@v0.14.0 stdlib@go1.22.4	0.55.0 1.25.13

Open the chart page →

2,227

external-dns-operatorappscode

2026.6.22

1 of 1 See more

external-dns-operator appscode 2026.6.22

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/external-dns-operator :v0.4.0	5605f97e636d	stdlib@go1.25.12	1.25.13

Open the chart page →

297

falco-ui-serverappscode

2026.1.15

2 of 2 See more

falco-ui-server appscode 2026.1.15

2 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
rancher/kine :v0.11.4	12889bbcd1e8	golang.org/x/net@v0.17.0 stdlib@go1.21.5	0.55.0 1.25.13
ghcr.io/appscode/falco-ui-server :v0.0.6	6ec488d89b56	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.55.0 1.25.13

Open the chart page →

2,887

fargocdappscode

2026.5.22

1 of 1 See more

fargocd appscode 2026.5.22

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/fargocd :v0.0.3	1f5c791fc54d	stdlib@go1.25.11	1.25.13

Open the chart page →

456

fargocd-managerappscode

2026.5.22

1 of 1 See more

fargocd-manager appscode 2026.5.22

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/fargocd :v0.0.3	1f5c791fc54d	stdlib@go1.25.11	1.25.13

Open the chart page →

456

fluxcd-addon-managerappscode

2024.2.25

1 of 1 See more

fluxcd-addon-manager appscode 2024.2.25

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/kluster-manager/fluxcd-addon :v0.0.2	3acba3df8827	golang.org/x/net@v0.23.0 stdlib@go1.22.3	0.55.0 1.25.13

Open the chart page →

1,311

fluxcd-managerappscode

2026.2.16

1 of 1 See more

fluxcd-manager appscode 2026.2.16

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/kluster-manager/fluxcd-addon :v0.0.10	3475404bef5c	golang.org/x/net@v0.47.0 stdlib@go1.25.6	0.55.0 1.25.13

Open the chart page →

1,101

gateway-converterappscode

2024.8.30

1 of 1 See more

gateway-converter appscode 2024.8.30

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/voyagermesh/gateway-converter :v0.0.1	b92123805584	golang.org/x/net@v0.27.0 stdlib@go1.23.1	0.55.0 1.25.13

Open the chart page →

1,275

gcp-credential-managerappscode

2026.3.11

1 of 1 See more

gcp-credential-manager appscode 2026.3.11

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/gcp-credential-manager :v0.1.0	b58345fe8209	golang.org/x/net@v0.47.0 stdlib@go1.25.8	0.55.0 1.25.13

Open the chart page →

1,067

gh-ci-webhookappscode

2026.9.11

1 of 1 See more

gh-ci-webhook appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/gh-ci-webhook :v0.0.20	36ce246d884e	golang.org/x/net@v0.33.0 stdlib@go1.24.0	0.55.0 1.25.13

Open the chart page →

1,248

Container images carrying it

5,293 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
deluan/navidrome :0.61.2	9fa40b3d8dec	golang.org/x/net@v0.52.0 stdlib@go1.25.9	0.55.0 1.25.13	1
denniswitt/yas3p :0.2.4	88a235619af6	golang.org/x/net@v0.52.0 stdlib@go1.26.1	0.55.0 1.25.13	1
devopsfaith/krakend :2.6.3	4c678c224f67	golang.org/x/net@v0.24.0 stdlib@go1.22.3	0.55.0 1.25.13	1
devopsfaith/krakend :2.7.0	9219cda867e2	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.55.0 1.25.13	1
devopstales/trivy-operator :2.5	75136aa7a26e	golang.org/x/net@v0.4.0 stdlib@go1.18.10	0.55.0 1.25.13	1
devsecurely/cview-issuer :0.0.42	eecd4314e933	golang.org/x/net@v0.52.0 stdlib@go1.25.10	0.55.0 1.25.13	1
devspacecloud/manager :0.3.3	49c397413f7b	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.8	0.55.0 1.25.13	1
dexidp/dex :v2.39.1-distroless	43655afd1a8f	golang.org/x/net@v0.24.0 stdlib@go1.21.6	0.55.0 1.25.13	1
deyaeddin/cert-manager-webhook-hetzner :latest	797b0d06210a	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.16.7	0.55.0 1.25.13	1
dgraph/dgraph :v24.1.4	b57fa31f9b7f	golang.org/x/net@v0.35.0 stdlib@go1.22.12	0.55.0 1.25.13	1
dgraph/ratel :v25.0.3	4cae1ff95027	stdlib@go1.23.10	1.25.13	1
digitalocean/do-operator :v0.1.6	5e5deb4db76e	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10 stdlib@go1.18.10	0.55.0 1.25.13	1
dipugodocker/pdf-editor :1.0-backend-rotate	316e203b8bf5	stdlib@go1.18.7	1.25.13	1
dipugodocker/pdf-editor :1.0-backend-merge	70b07544a604	stdlib@go1.18.7	1.25.13	1
dirathea/pipelinewise-operator :v0.5.0	8d4c9f773ae1	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.15.8	0.55.0 1.25.13	1
directus/directus :12.0.2	9c8470ea465c	stdlib@go1.23.12	1.25.13	1
directus/directus :11.1.0	e3c8bb975350	stdlib@go1.20.7	1.25.13	1
distribution/distribution :3.1.1	bca24727f400	golang.org/x/net@v0.52.0 stdlib@go1.25.9	0.55.0 1.25.13	1
distribution/distribution :2.8.3	f84b2078238f	stdlib@go1.20.8	1.25.13	1
djjudas21/nova-exporter :0.0.10	e9094580885c	golang.org/x/net@v0.41.0 stdlib@go1.24.4	0.55.0 1.25.13	1
djkormo/adcs-issuer :2.1.2	9f34e87e7586	golang.org/x/net@v0.26.0 stdlib@go1.22.6	0.55.0 1.25.13	1
dnsforge/xteve :latest	4d9a685c8c28	golang.org/x/net@v0.0.0-20200904194848-62affa334b73 stdlib@go1.16.2	0.55.0 1.25.13	1
dobtc/bitcoin :25.1	a870f7cb1105	stdlib@go1.19.8	1.25.13	1
dockerdaemon0901/rolldice :v1	4e5bfe179c7e	golang.org/x/net@v0.17.0 stdlib@go1.21.0	0.55.0 1.25.13	1
documenso/documenso :v1.8.1	7f16a9449f18	stdlib@go1.20.12	1.25.13	1
dollarshaveclub/furan2 :master	14a257836529	golang.org/x/net@v0.0.0-20201002202402-0a1ea396d57c stdlib@go1.17.2	0.55.0 1.25.13	1
dollarshaveclub/thermite :0.0.31	663cbf25fcfe	golang.org/x/net@v0.0.0-20210805182204-aaa1db679c0d stdlib@go1.17.1	0.55.0 1.25.13	1
donetick/donetick :v0.1.79	a1cc21dd5a37	golang.org/x/net@v0.49.0 stdlib@go1.24.13	0.55.0 1.25.13	1
dongjiang1989/cosign-webhook :v1.1.0	2a3ead6a55dc	golang.org/x/net@v0.11.0 stdlib@go1.19.12	0.55.0 1.25.13	1
dongjiang1989/cpusets-controller :v1.1.1	dc5bd483874c	golang.org/x/net@v0.10.0 stdlib@go1.19.10	0.55.0 1.25.13	1
dongjiang1989/cpusets-device-plugin :v1.1.1	923085c65123	golang.org/x/net@v0.10.0 stdlib@go1.19.10	0.55.0 1.25.13	1
dongjiang1989/crane-scheduler-controller :main	f0055c05dbee	golang.org/x/net@v0.7.0 stdlib@go1.19.9	0.55.0 1.25.13	1
dongjiang1989/lxcfs-webhook :latest	c1f19557bdcb	stdlib@go1.26.0	1.25.13	1
dongjiang1989/ns-node-affinity :latest	451f7823723c	golang.org/x/net@v0.7.0 stdlib@go1.18.5	0.55.0 1.25.13	1
dongjiang1989/pingmesh-agent :latest	355fa4be8e97	golang.org/x/net@v0.29.0 stdlib@go1.22.9	0.55.0 1.25.13	1
dongjiang1989/pingmesh-agent :v1.2.2	c82de0272da0	golang.org/x/net@v0.29.0 stdlib@go1.22.9	0.55.0 1.25.13	1
doorcloud/apim-operator :v3.0.4	4e6ef8d72c3e	golang.org/x/net@v0.28.0 stdlib@go1.22.12	0.55.0 1.25.13	1
dossif/redminebot :0.2.2	96dcd2c0e9f2	stdlib@go1.17.13	1.25.13	1
douz/overlord :latest	f2bc7fc068c1	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7 stdlib@go1.14.5	0.55.0 1.25.13	1
dragonflyoss/client :v1.5.5	9fe2a1d6206f	stdlib@go1.26.5	1.25.13	1
dragonflyoss/client :v0.1.82	edf3e921f4e0	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.55.0 1.25.13	1
dragonflyoss/manager :v2.1.49	c3ef7f10698d	golang.org/x/net@v0.19.0 stdlib@go1.21.1	0.55.0 1.25.13	1
dragonflyoss/scheduler :v2.1.49	523785c77787	golang.org/x/net@v0.19.0 stdlib@go1.21.1	0.55.0 1.25.13	1
dragonflyoss/scheduler :v2.5.2	d5dea9e662cd	golang.org/x/net@v0.48.0 stdlib@go1.25.5	0.55.0 1.25.13	1
drone/drone :2.28.2	55897c8fb22d	golang.org/x/net@v0.42.0 stdlib@go1.24.13	0.55.0 1.25.13	1
drone/drone-runner-docker :1.8.1	137e79c5e23c	golang.org/x/net@v0.0.0-20190404232315-eb5bcb51f2a3 stdlib@go1.16.15	0.55.0 1.25.13	1
drone/kubernetes-secrets :latest	206df2280ecf	golang.org/x/net@v0.0.0-20180811021610-c39426892332 stdlib@go1.13.15	0.55.0 1.25.13	1
drorivry4/rego :latest	e035d49b15ca	golang.org/x/net@v0.19.0 stdlib@go1.22.0	0.55.0 1.25.13	1
drumsergio/duplicacy-container :0.1.0	dd3ee9703969	golang.org/x/net@v0.10.0 stdlib@go1.21.13	0.55.0 1.25.13	1
drumsergio/genieacs :1.2.16.0	28244054e1bf	stdlib@go1.19.8	1.25.13	1