CVE-2026-39821

High

Advisory

Published 22 May 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 8.2; base score, highest
EPSS: 0.007; 51st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 4,507; of 17,803 indexed, latest versions
Container images: 5,247; deployed by those charts
Fix available: 3 of 3; affected packages

Red Hat Security Advisory: git-lfs security update

Carried by container images the latest versions of 4,507 of 17,803 indexed charts deploy, on 5,247 images.

Affected package	Affected versions	Fixed in	Images
git-lfsrpm	2.13.3-3.el8_6	0:3.4.1-11.el8_10	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+189 more	1.25.13	5,211
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+220 more	0.55.0	3,667

OSV records: RHSA-2026:30853 GO-2026-5026

Charts affected

4,507 by stars

Chart

Latest

Affected images

Radar Score

csi-driver-nfsbook-k8sinfra-v2

4.12.1

6 of 6 See more

csi-driver-nfs book-k8sinfra-v2 4.12.1

6 of the 6 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.15.0	11f199f6bec4	golang.org/x/net@v0.40.0 stdlib@go1.24.6	0.55.0 1.25.13
registry.k8s.io/sig-storage/csi-provisioner :v5.3.0	bb057f866177	golang.org/x/net@v0.40.0 stdlib@go1.24.2	0.55.0 1.25.13
registry.k8s.io/sig-storage/csi-resizer :v1.14.0	5e7cbb63fd49	golang.org/x/net@v0.39.0 stdlib@go1.24.2	0.55.0 1.25.13
registry.k8s.io/sig-storage/csi-snapshotter :v8.3.0	bc7be893ecc3	golang.org/x/net@v0.39.0 stdlib@go1.24.2	0.55.0 1.25.13
registry.k8s.io/sig-storage/livenessprobe :v2.17.0	9b75b9ade162	golang.org/x/net@v0.40.0 stdlib@go1.24.6	0.55.0 1.25.13
registry.k8s.io/sig-storage/nfsplugin :v4.11.0	ce5b5ccd5eb0	golang.org/x/net@v0.37.0 stdlib@go1.23.6	0.55.0 1.25.13

Open the chart page →

6,269

grafanabook-k8sinfra-v2

8.8.2

1 of 1 See more

grafana book-k8sinfra-v2 8.8.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
grafana/grafana :11.4.0	d8ea37798ccc	golang.org/x/net@v0.29.0 stdlib@go1.23.1	0.55.0 1.25.13

Open the chart page →

1,813

jaegerbook-k8sinfra-v2

3.4.0

4 of 5 See more

jaeger book-k8sinfra-v2 3.4.0

4 of the 5 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-agent :1.53.0	0214a0ef24b1	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.55.0 1.25.13
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	stdlib@go1.18.2	1.25.13
jaegertracing/jaeger-collector :1.53.0	7f1269222903	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.55.0 1.25.13
jaegertracing/jaeger-query :1.53.0	049bb0d64ea3	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.55.0 1.25.13

Open the chart page →

19,351

jenkinsbook-k8sinfra-v2

5.1.12

1 of 2 See more

jenkins book-k8sinfra-v2 5.1.12

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
jenkins/jenkins :2.440.3-jdk17	de4fea113221	golang.org/x/net@v0.17.0 stdlib@go1.21.8	0.55.0 1.25.13

Open the chart page →

8,346

kube-prometheus-stackbook-k8sinfra-v2

65.5.1

5 of 6 See more

kube-prometheus-stack book-k8sinfra-v2 65.5.1

5 of the 6 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
grafana/grafana :11.2.2-security-01	464eac539793	golang.org/x/net@v0.28.0 stdlib@go1.22.7	0.55.0 1.25.13
quay.io/prometheus-operator/prometheus-operator :v0.77.2	af92db7eac86	golang.org/x/net@v0.29.0 stdlib@go1.23.2	0.55.0 1.25.13
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/net@v0.23.0 stdlib@go1.22.5	0.55.0 1.25.13
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20221220-controller-v1.5.1-58-g787ea74b6	4d99688e5573	golang.org/x/net@v0.1.0 stdlib@go1.19.4	0.55.0 1.25.13
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.13.0	639a1e2da549	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.55.0 1.25.13

Open the chart page →

6,049

metallbbook-k8sinfra-v2

0.13.10

2 of 3 See more

metallb book-k8sinfra-v2 0.13.10

2 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
quay.io/metallb/controller :v0.13.10	1b33357b3595	golang.org/x/net@v0.8.0 stdlib@go1.19.5	0.55.0 1.25.13
quay.io/metallb/speaker :v0.13.10	00406ccb1fa0	golang.org/x/net@v0.8.0 stdlib@go1.19.5	0.55.0 1.25.13

Open the chart page →

3,857

nfs-subdir-external-provisionerbook-k8sinfra-v2

4.0.18

1 of 1 See more

nfs-subdir-external-provisioner book-k8sinfra-v2 4.0.18

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner :v4.0.0	3ce0fdba4d8e	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.15	0.55.0 1.25.13

Open the chart page →

2,745

prometheusbook-k8sinfra-v2

26.0.1

6 of 6 See more

prometheus book-k8sinfra-v2 26.0.1

6 of the 6 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
prom/prometheus :v3.0.1	565ee8650122	golang.org/x/net@v0.30.0 stdlib@go1.23.3	0.55.0 1.25.13
quay.io/prometheus-operator/prometheus-config-reloader :v0.78.2	944b2c67345c	golang.org/x/net@v0.30.0 stdlib@go1.23.3	0.55.0 1.25.13
quay.io/prometheus/alertmanager :v0.27.0	e13b6ed5cb92	golang.org/x/net@v0.20.0 stdlib@go1.21.7	0.55.0 1.25.13
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/net@v0.23.0 stdlib@go1.22.5	0.55.0 1.25.13
quay.io/prometheus/pushgateway :v1.10.0	7a4d0696a24e	golang.org/x/net@v0.28.0 stdlib@go1.23.1	0.55.0 1.25.13
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.14.0	37d841299325	golang.org/x/net@v0.29.0 stdlib@go1.23.3	0.55.0 1.25.13

Open the chart page →

5,312

pyroscopebook-k8sinfra-v2

1.10.0

3 of 3 See more

pyroscope book-k8sinfra-v2 1.10.0

3 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.1.1	c3dac4e26471	golang.org/x/net@v0.24.0 stdlib@go1.22.3	0.55.0 1.25.13
grafana/pyroscope :1.10.0	319bf32ae06b	golang.org/x/net@v0.26.0 stdlib@go1.22.7	0.55.0 1.25.13
ghcr.io/jimmidyson/configmap-reload :v0.12.0	a7c754986900	stdlib@go1.21.1	1.25.13

Open the chart page →

3,258

redisbook-k8sinfra-v2

1.0.0

1 of 1 See more

redis book-k8sinfra-v2 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/redis :7.0.4	091a7b5de688	stdlib@go1.16.7	1.25.13

Open the chart page →

1,731

tempobook-k8sinfra-v2

1.10.3

1 of 1 See more

tempo book-k8sinfra-v2 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
grafana/tempo :2.5.0	f0200a9bff6d	golang.org/x/net@v0.24.0 stdlib@go1.21.3	0.55.0 1.25.13

Open the chart page →

1,867

boundary-softsciboundary-softsci

0.2.4

1 of 1 See more

boundary-softsci boundary-softsci 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
hashicorp/boundary :latest	76a201954ca0	golang.org/x/net@v0.48.0 stdlib@go1.25.7	0.55.0 1.25.13

Open the chart page →

734

branchdbbranch-db

0.1.4

2 of 3 See more

branchdb branch-db 0.1.4

2 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/masucchi/branchdb :0.1.4	7ea1820c1da1	stdlib@go1.26.4	1.25.13
ghcr.io/masucchi/branchdb-operator :0.1.4	c16578615a43	stdlib@go1.26.4	1.25.13

Open the chart page →

517

bitmagnetbrandan-schmitz-helm-charts

1.0.6

2 of 2 See more

bitmagnet brandan-schmitz-helm-charts 1.0.6

2 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/postgres :16-alpine	cf78e76683b9	stdlib@go1.24.6	1.25.13
ghcr.io/bitmagnet-io/bitmagnet :v0.10.0	cf2c16fac5b5	golang.org/x/net@v0.34.0 stdlib@go1.23.6	0.55.0 1.25.13

Open the chart page →

1,722

Filebrowserbrandan-schmitz-helm-charts

1.3.1

1 of 1 See more

Filebrowser brandan-schmitz-helm-charts 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
filebrowser/filebrowser :v2.63.15-s6	dbac07403040	stdlib@go1.26.4	1.25.13

Open the chart page →

989

pagesbrian-pages

1.0.0

1 of 3 See more

pages brian-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.13

Open the chart page →

20,262

pagesbrixton-mayuribhavsar23-pages

1.0.0

1 of 3 See more

pages brixton-mayuribhavsar23-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.13

Open the chart page →

20,262

pagesbrixton-pages

1.0.0

1 of 3 See more

pages brixton-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.13

Open the chart page →

20,262

tautullibryanalves

0.1.0

1 of 1 See more

tautulli bryanalves 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
tautulli/tautulli :latest	670e68dd9efc	stdlib@go1.24.4	1.25.13

Open the chart page →

1,930

node-appbryopsida

0.5.1

1 of 2 See more

node-app bryopsida 0.5.1

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/bryopsida/k8s-dev-pod :main	82d0b161161d	golang.org/x/net@v0.38.0 stdlib@go1.24.3	0.55.0 1.25.13

Open the chart page →

14,576

plexbryopsida

0.2.0

1 of 1 See more

plex bryopsida 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/plex :latest	7f9a1d574958	stdlib@go1.26.5	1.25.13

Open the chart page →

864

buildkitbuildkit

0.1.0

1 of 1 See more

buildkit buildkit 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
moby/buildkit :master-rootless	07115a67cd22	golang.org/x/net@v0.53.0 stdlib@go1.25.7	0.55.0 1.25.13

Open the chart page →

620

buildkit-privilegedbuildkit-privileged

0.1.0

1 of 1 See more

buildkit-privileged buildkit-privileged 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
moby/buildkit :master	bc964521ee58	golang.org/x/net@v0.50.0 stdlib@go1.25.7	0.55.0 1.25.13

Open the chart page →

403

category-microservicebusi-ads

1.0.0

1 of 2 See more

category-microservice busi-ads 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/mongo :latest	5211c51171f5	stdlib@go1.26.5	1.25.13

Open the chart page →

11,978

butane-operatorbutane-operator

0.3.0

2 of 2 See more

butane-operator butane-operator 0.3.0

2 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/naval-group/butane-operator :v0.1.1-rc2	85818b510780	golang.org/x/net@v0.49.0 stdlib@go1.26.0	0.55.0 1.25.13
registry.k8s.io/kubebuilder/kube-rbac-proxy :v0.16.0	771a9a173e03	golang.org/x/net@v0.21.0 stdlib@go1.21.7	0.55.0 1.25.13

Open the chart page →

1,403

butlercibutlerci

0.1.0

1 of 1 See more

butlerci butlerci 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
etejeda/butlerci :0.1.0	737d58183abc	golang.org/x/net@v0.0.0-20200822124328-c89045814202 stdlib@go1.16.3	0.55.0 1.25.13

Open the chart page →

2,375

accelerationbuttahtoast

0.1.0

1 of 1 See more

acceleration buttahtoast 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
goharbor/harbor-acceld :0.2.13	451103a6c8d8	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.55.0 1.25.13

Open the chart page →

1,409

fluobuttahtoast

0.1.0

1 of 1 See more

fluo buttahtoast 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/flatcar/flatcar-linux-update-operator :v0.10.0-rc1	f9063e20b1f6	golang.org/x/net@v0.8.0 stdlib@go1.20.6	0.55.0 1.25.13

Open the chart page →

1,299

kubermatic-operatorbuttahtoast

2.24.5

1 of 1 See more

kubermatic-operator buttahtoast 2.24.5

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
quay.io/kubermatic/kubermatic :v2.24.5	ebba936046ab	golang.org/x/net@v0.19.0 stdlib@go1.20.6	0.55.0 1.25.13

Open the chart page →

2,781

kubevirt-managerbuttahtoast

0.1.3

1 of 1 See more

kubevirt-manager buttahtoast 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
kubevirtmanager/kubevirt-manager :1.3.3	df3ea27d4a9e	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.55.0 1.25.13

Open the chart page →

1,497

gotenbergbysamio

0.2.0

1 of 1 See more

gotenberg bysamio 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
gotenberg/gotenberg :8-chromium	a40f92d7419a	stdlib@go1.26.5	1.25.13

Open the chart page →

9,365

mariadbbysamio

1.0.2

1 of 1 See more

mariadb bysamio 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/mariadb :12.0.2	607835cd628b	stdlib@go1.24.6	1.25.13

Open the chart page →

2,958

miniobysamio

1.0.3

1 of 1 See more

minio bysamio 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2025-09-07T16-13-09Z	14cea493d9a3	golang.org/x/net@v0.39.0 stdlib@go1.24.6	0.55.0 1.25.13

Open the chart page →

1,084

payloadboxbytefork

0.0.4

1 of 1 See more

payloadbox bytefork 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/bytefork/payloadbox :0.0.7	3e0164e975b3	stdlib@go1.26.3	1.25.13

Open the chart page →

caddycaddy

0.0.4

1 of 1 See more

caddy caddy 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/caddy :2.11.2-alpine	834468128c76	golang.org/x/net@v0.51.0 stdlib@go1.26.0	0.55.0 1.25.13

Open the chart page →

1,677

etcdcagriekin

0.1.5

1 of 1 See more

etcd cagriekin 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
quay.io/coreos/etcd :v3.5.16	d967d98a12dc	golang.org/x/net@v0.23.0 stdlib@go1.22.7	0.55.0 1.25.13

Open the chart page →

899

kafkacagriekin

0.2.0

1 of 2 See more

kafka cagriekin 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
danielqsj/kafka-exporter :v1.9.0	4150e46b2e96	golang.org/x/net@v0.34.0 stdlib@go1.24.0	0.55.0 1.25.13

Open the chart page →

2,402

rediscagriekin

1.5.2

1 of 2 See more

redis cagriekin 1.5.2

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
oliver006/redis_exporter :v1.67.0	120f7ec77293	stdlib@go1.23.4	1.25.13

Open the chart page →

1,401

ct-singlecalltelemetry

0.8.4

4 of 7 See more

ct-single calltelemetry 0.8.4

4 of the 7 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/nats :2.8.4-alpine	988010f74b61	stdlib@go1.17.10	1.25.13
natsio/nats-box :0.11.0	9fbf7bf684e4	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2 stdlib@go1.18.1	0.55.0 1.25.13
natsio/nats-server-config-reloader :0.7.2	911ce7ed2f55	stdlib@go1.19	1.25.13
natsio/prometheus-nats-exporter :0.10.0	16048afb67a5	stdlib@go1.19	1.25.13

Open the chart page →

10,672

stablecalltelemetry

0.7.1

4 of 9 See more

stable calltelemetry 0.7.1

4 of the 9 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/nats :2.8.4-alpine	988010f74b61	stdlib@go1.17.10	1.25.13
natsio/nats-box :0.11.0	9fbf7bf684e4	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2 stdlib@go1.18.1	0.55.0 1.25.13
natsio/nats-server-config-reloader :0.7.2	911ce7ed2f55	stdlib@go1.19	1.25.13
natsio/prometheus-nats-exporter :0.10.0	16048afb67a5	stdlib@go1.19	1.25.13

Open the chart page →

7,703

stable-hacalltelemetry

0.11.4

3 of 7 See more

stable-ha calltelemetry 0.11.4

3 of the 7 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/nats :2.10.12-alpine	bca70839d953	stdlib@go1.21.8	1.25.13
natsio/nats-box :0.14.2	e808e0644ce1	golang.org/x/net@v0.17.0 stdlib@go1.21.5	0.55.0 1.25.13
natsio/nats-server-config-reloader :0.14.1	0d50270fa374	stdlib@go1.20.5	1.25.13

Open the chart page →

4,705

pagescamden-pages

1.0.0

1 of 3 See more

pages camden-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.13

Open the chart page →

20,262

camellia-redis-proxycamellia-redis-proxy

1.4.0

1 of 2 See more

camellia-redis-proxy camellia-redis-proxy 1.4.0

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/redis :5.0	fc5ecd863862	stdlib@go1.16.7	1.25.13

Open the chart page →

8,042

geoservercamptocamp2

0.0.3

1 of 12 See more

geoserver camptocamp2 0.0.3

1 of the 12 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/postgres :12	2f2a8c2a7d10	stdlib@go1.18.2	1.25.13

Open the chart page →

88,699

bucket-clonercamptocamp3

1.0.4

1 of 1 See more

bucket-cloner camptocamp3 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
camptocamp/bucket-cloner :latest	acfafc308d88	golang.org/x/net@v0.0.0-20210415231046-e915ea6b2b7d stdlib@go1.16.5	0.55.0 1.25.13

Open the chart page →

4,526

getconfigcamptocamp3

0.1.1

1 of 1 See more

getconfig camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
quay.io/oauth2-proxy/oauth2-proxy :v7.3.0	8c21390be87d	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2 stdlib@go1.17.10	0.55.0 1.25.13

Open the chart page →

2,201

prometheus-puppetdb-sdcamptocamp3

8.0.2

1 of 2 See more

prometheus-puppetdb-sd camptocamp3 8.0.2

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/camptocamp/prometheus-puppetdb-sd :0.14.0	414c0c99fd06	golang.org/x/net@v0.34.0 stdlib@go1.23.5	0.55.0 1.25.13

Open the chart page →

6,174

redisoperatorcamptocamp3

3.0.1

1 of 1 See more

redisoperator camptocamp3 3.0.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
quay.io/spotahome/redis-operator :latest	8c772955184e	golang.org/x/net@v0.8.0 stdlib@go1.20.7	0.55.0 1.25.13

Open the chart page →

1,194

s3-exportercamptocamp3

2.2.0

1 of 1 See more

s3-exporter camptocamp3 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ribbybibby/s3-exporter :v0.5.0	998184c51a00	stdlib@go1.15.15	1.25.13

Open the chart page →

1,183

snyk-exportercamptocamp3

0.1.4

1 of 1 See more

snyk-exporter camptocamp3 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
quay.io/lunarway/snyk_exporter :v1.11.1	55e5cc5aaa0a	stdlib@go1.17.7	1.25.13

Open the chart page →

1,079

Container images carrying it

5,247 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
goharbor/chartmuseum-photon :v2.5.3	6ab3ca28e9e5	golang.org/x/net@v0.0.0-20220121210141-e204ce36a2ba stdlib@go1.17.7	0.55.0 1.25.13	1
goharbor/harbor-acceld :0.2.13	451103a6c8d8	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.55.0 1.25.13	1
goharbor/harbor-core :v2.9.0	6412d679fdc3	golang.org/x/net@v0.10.0 stdlib@go1.20.7	0.55.0 1.25.13	1
goharbor/harbor-core :v2.5.3	86bf3031f4a7	golang.org/x/net@v0.0.0-20211013171255-e13a2654a71e stdlib@go1.17.7	0.55.0 1.25.13	1
goharbor/harbor-core :v2.14.3	a30e5a8be3d9	golang.org/x/net@v0.47.0 stdlib@go1.24.13	0.55.0 1.25.13	1
goharbor/harbor-core :v2.11.1	c017dd84ee96	golang.org/x/net@v0.24.0 stdlib@go1.22.6	0.55.0 1.25.13	1
goharbor/harbor-jobservice :v2.9.0	39435daedd0c	golang.org/x/net@v0.10.0 stdlib@go1.20.7	0.55.0 1.25.13	1
goharbor/harbor-jobservice :v2.5.3	8d5339ff2d74	golang.org/x/net@v0.0.0-20211013171255-e13a2654a71e stdlib@go1.17.7	0.55.0 1.25.13	1
goharbor/harbor-jobservice :v2.14.3	e2b0298e894d	golang.org/x/net@v0.47.0 stdlib@go1.24.13	0.55.0 1.25.13	1
goharbor/harbor-registryctl :v2.5.3	7f82ed1e2635	golang.org/x/net@v0.0.0-20211013171255-e13a2654a71e stdlib@go1.17.7	0.55.0 1.25.13	1
goharbor/harbor-registryctl :v2.9.0	cce272836449	golang.org/x/net@v0.10.0 stdlib@go1.20.7	0.55.0 1.25.13	1
goharbor/harbor-registryctl :v2.14.3	ddf6bb429eb6	golang.org/x/net@v0.47.0 stdlib@go1.24.13	0.55.0 1.25.13	1
goharbor/notary-server-photon :v2.5.3	fd91a4a1273f	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.15	0.55.0 1.25.13	1
goharbor/notary-signer-photon :v2.5.3	a92b51aa7d6e	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.15	0.55.0 1.25.13	1
goharbor/registry-photon :v2.11.1	5645d459af2b	stdlib@go1.22.6	1.25.13	1
goharbor/registry-photon :v2.14.3	6533fc396cbc	stdlib@go1.24.13	1.25.13	1
goharbor/registry-photon :v2.9.0	8a26e8cb7862	stdlib@go1.20.7	1.25.13	1
goharbor/trivy-adapter-photon :v2.14.3	5c6f7162804c	golang.org/x/net@v0.28.0 stdlib@go1.25.7	0.55.0 1.25.13	1
goharbor/trivy-adapter-photon :v2.5.3	b9522c3f5056	golang.org/x/net@v0.0.0-20211108170745-6635138e15ea stdlib@go1.18.3	0.55.0 1.25.13	1
goharbor/trivy-adapter-photon :v2.9.0	dc5b882a7db4	golang.org/x/net@v0.12.0 stdlib@go1.20.7	0.55.0 1.25.13	1
golift/unifi-poller :v2.9.5	486a63339969	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.55.0 1.25.13	1
golift/unifi-poller :v2.9.2	585a29a06d05	golang.org/x/net@v0.15.0 stdlib@go1.21.0	0.55.0 1.25.13	1
golift/unifi-poller :2.0.0	cafac968b540	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.13.7	0.55.0 1.25.13	1
gomods/athens :v0.17.1	0f61d1e62359	golang.org/x/net@v0.52.0 stdlib@go1.25.9	0.55.0 1.25.13	1
gomods/athens :v0.18.1	97cc113b34b0	stdlib@go1.24.1	1.25.13	1
gomods/athens :v0.8.1	d714c7ff0231	golang.org/x/net@v0.0.0-20191027093000-83d349e8ac1a stdlib@go1.13.4	0.55.0 1.25.13	1
gomods/athens :v0.11.0	efb811df7844	golang.org/x/net@v0.0.0-20200222125558-5a598a2470a0 stdlib@go1.13.10	0.55.0 1.25.13	1
goofball222/pritunl :1.32.3602.80	7bf26032dfce	golang.org/x/net@v0.7.0 stdlib@go1.18.7	0.55.0 1.25.13	1
gophish/gophish :0.12.1	8a57cd171999	golang.org/x/net@v0.0.0-20190404232315-eb5bcb51f2a3 stdlib@go1.15.2	0.55.0 1.25.13	1
gotenberg/gotenberg :8.30	206a6c708fc6	golang.org/x/net@v0.52.0 stdlib@go1.26.0	0.55.0 1.25.13	1
gotenberg/gotenberg :8.34	67097317623a	stdlib@go1.26.2	1.25.13	1
gotenberg/gotenberg :8-chromium	a40f92d7419a	stdlib@go1.26.5	1.25.13	1
gotify/server :2.1.4	09c79bc1e403	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.16	0.55.0 1.25.13	1
gotify/server :2.9.1	a3af47067ce6	golang.org/x/net@v0.48.0 stdlib@go1.26.0	0.55.0 1.25.13	1
gotson/komga :1.22.0	ba892ab3e082	stdlib@go1.17.8	1.25.13	1
gradiant/open5gs-dbctl :0.10.3	332031245fce	golang.org/x/net@v0.34.0 stdlib@go1.22.11	0.55.0 1.25.13	1
grafana/agent :v0.44.2	3364714a2f64	golang.org/x/net@v0.33.0 stdlib@go1.22.11	0.55.0 1.25.13	1
grafana/agent :v0.20.0	825c09373d27	golang.org/x/net@v0.0.0-20210917221730-978cfadd31cf stdlib@go1.16	0.55.0 1.25.13	1
grafana/agent :v0.40.3	f6cbec9409be	golang.org/x/net@v0.20.0 stdlib@go1.22.1	0.55.0 1.25.13	1
grafana/agent-operator :v0.34.1	045c9125634c	golang.org/x/net@v0.10.0 stdlib@go1.20.4	0.55.0 1.25.13	1
grafana/alloy :v1.5.1	01a63f4e032c	golang.org/x/net@v0.31.0 stdlib@go1.22.7	0.55.0 1.25.13	1
grafana/alloy :v1.4.3	06bdcbb51fc2	golang.org/x/net@v0.29.0 stdlib@go1.22.7	0.55.0 1.25.13	1
grafana/alloy :v1.18.1	0f4434c92b3e	stdlib@go1.26.5	1.25.13	1
grafana/alloy :v1.18.0	491b0578c049	stdlib@go1.26.5	1.25.13	1
grafana/alloy :v1.16.3	84b76d56c594	stdlib@go1.26.3	1.25.13	1
grafana/alloy :v1.11.3	8c7256f412fe	golang.org/x/net@v0.43.0 stdlib@go1.24.6	0.55.0 1.25.13	1
grafana/alloy :v1.1.1	c3dac4e26471	golang.org/x/net@v0.24.0 stdlib@go1.22.3	0.55.0 1.25.13	1
grafana/alloy :v1.14.0	f50931848bd8	golang.org/x/net@v0.50.0 stdlib@go1.25.7	0.55.0 1.25.13	1
grafana/beyla :1.3.3	36d07f8d276e	golang.org/x/net@v0.21.0 stdlib@go1.21.7	0.55.0 1.25.13	1
grafana/beyla :3.32.0	3ff0f7cf2bbf	stdlib@go1.25.11	1.25.13	1