CVE-2026-39821

High

Advisory

Published 22 May 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 8.2; base score, highest
EPSS: 0.007; 51st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 4,535; of 17,792 indexed, latest versions
Container images: 5,293; deployed by those charts
Fix available: 3 of 3; affected packages

Red Hat Security Advisory: git-lfs security update

Carried by container images the latest versions of 4,535 of 17,792 indexed charts deploy, on 5,293 images.

Affected package	Affected versions	Fixed in	Images
git-lfsrpm	2.13.3-3.el8_6	0:3.4.1-11.el8_10	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+189 more	1.25.13	5,256
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+220 more	0.55.0	3,684

OSV records: RHSA-2026:30853 GO-2026-5026

Charts affected

4,535 by stars

Chart

Latest

Affected images

Radar Score

ff-testfrankframework

0.7.6

1 of 2 See more

ff-test frankframework 0.7.6

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/postgres :17-bookworm	051f7b7b3abd	stdlib@go1.24.6	1.25.13

Open the chart page →

1,777

frank2examplefrankframework

0.7.4

1 of 2 See more

frank2example frankframework 0.7.4

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/postgres :17-bookworm	051f7b7b3abd	stdlib@go1.24.6	1.25.13

Open the chart page →

1,777

free5gc-amffree5gc-amf

0.1.3

1 of 1 See more

free5gc-amf free5gc-amf 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
free5gc/amf :v3.4.3	1bc96ff5a2a6	golang.org/x/net@v0.24.0 stdlib@go1.21.8	0.55.0 1.25.13

Open the chart page →

902

free5gc-ausffree5gc-ausf

0.1.3

1 of 1 See more

free5gc-ausf free5gc-ausf 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
free5gc/ausf :v3.4.3	687ff4daf5da	golang.org/x/net@v0.23.0 stdlib@go1.21.8	0.55.0 1.25.13

Open the chart page →

911

free5gc-chffree5gc-chf

0.1.3

1 of 1 See more

free5gc-chf free5gc-chf 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
free5gc/chf :v3.4.3	e2a4dd98a4ed	golang.org/x/net@v0.24.0 stdlib@go1.21.8	0.55.0 1.25.13

Open the chart page →

1,004

free5gc-nrffree5gc-nrf

0.1.3

1 of 1 See more

free5gc-nrf free5gc-nrf 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
free5gc/nrf :v3.4.3	99e46b860efb	golang.org/x/net@v0.23.0 stdlib@go1.21.8	0.55.0 1.25.13

Open the chart page →

919

free5gc-nssffree5gc-nssf

0.1.3

1 of 1 See more

free5gc-nssf free5gc-nssf 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
free5gc/nssf :v3.4.3	dfe8c68c04b4	golang.org/x/net@v0.23.0 stdlib@go1.21.8	0.55.0 1.25.13

Open the chart page →

911

free5gc-pcffree5gc-pcf

0.1.3

1 of 1 See more

free5gc-pcf free5gc-pcf 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
free5gc/pcf :v3.4.3	f712e8ecd927	golang.org/x/net@v0.23.0 stdlib@go1.21.8	0.55.0 1.25.13

Open the chart page →

903

free5gc-smffree5gc-smf

0.1.3

1 of 1 See more

free5gc-smf free5gc-smf 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
free5gc/smf :v3.4.3	60e38baa4b10	golang.org/x/net@v0.23.0 stdlib@go1.21.8	0.55.0 1.25.13

Open the chart page →

918

free5gc-udmfree5gc-udm

0.1.3

1 of 1 See more

free5gc-udm free5gc-udm 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
free5gc/udm :v3.4.3	2f68df062a50	golang.org/x/net@v0.23.0 stdlib@go1.21.8	0.55.0 1.25.13

Open the chart page →

911

free5gc-udrfree5gc-udr

0.1.3

1 of 1 See more

free5gc-udr free5gc-udr 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
free5gc/udr :v3.4.3	c0783bcdcbdc	golang.org/x/net@v0.23.0 stdlib@go1.21.8	0.55.0 1.25.13

Open the chart page →

919

free5gc-upffree5gc-upf

0.1.3

1 of 1 See more

free5gc-upf free5gc-upf 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
free5gc/upf :v3.4.3	b6b362a39fdd	golang.org/x/net@v0.23.0 stdlib@go1.21.8	0.55.0 1.25.13

Open the chart page →

1,075

free5gc-webuifree5gc-webui

0.1.3

1 of 1 See more

free5gc-webui free5gc-webui 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
free5gc/webui :v3.4.3	9adeb18492cb	golang.org/x/net@v0.23.0 stdlib@go1.21.8	0.55.0 1.25.13

Open the chart page →

1,256

powerdnsfsdrw08

0.1.3

1 of 4 See more

powerdns fsdrw08 0.1.3

1 of the 4 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
pschiffe/pdns-mysql :alpine	d196c796cafb	stdlib@go1.21.5	1.25.13

Open the chart page →

1,959

aptlyg0dscookie

0.4.0

1 of 2 See more

aptly g0dscookie 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/g0dscookie/aptly :latest	edd095d3c0ee	stdlib@go1.18.3	1.25.13

Open the chart page →

3,482

icinga2g0dscookie

0.2.0

1 of 1 See more

icinga2 g0dscookie 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/g0dscookie/icinga2 :2.13.5	da81246ccfc9	golang.org/x/net@v0.0.0-20210813160813-60bc85c4be6d stdlib@go1.18.1	0.55.0 1.25.13

Open the chart page →

4,429

passboltg0dscookie

0.5.2

2 of 2 See more

passbolt g0dscookie 0.5.2

2 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/mariadb :10.7	9a48ac9f196f	stdlib@go1.16.7	1.25.13
passbolt/passbolt :3.9.0-2-ce-non-root	ec046e112d5c	stdlib@go1.14.4	1.25.13

Open the chart page →

7,994

borgmaticgabe565

0.10.1

1 of 1 See more

borgmatic gabe565 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/borgmatic-collective/borgmatic :1.9.9	835b72878606	stdlib@go1.23.5	1.25.13

Open the chart page →

2,438

castsponsorskipgabe565

0.8.1

1 of 1 See more

castsponsorskip gabe565 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/gabe565/castsponsorskip :0.8.1	5f7b4c6dd299	golang.org/x/net@v0.32.0 stdlib@go1.23.4	0.55.0 1.25.13

Open the chart page →

1,237

generic-device-plugingabe565

0.1.3

1 of 1 See more

generic-device-plugin gabe565 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/squat/generic-device-plugin :latest	dc192e164c69	golang.org/x/net@v0.51.0 stdlib@go1.26.2	0.55.0 1.25.13

Open the chart page →

260

gotifygabe565

0.4.0

1 of 1 See more

gotify gabe565 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/gotify/server :2.6.1	04f4c4bb7cdd	golang.org/x/net@v0.25.0 stdlib@go1.23.3	0.55.0 1.25.13

Open the chart page →

763

hammondgabe565

0.6.4

1 of 1 See more

hammond gabe565 0.6.4

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
alfhou/hammond :v0.0.24	c85dc0293aa1	golang.org/x/net@v0.0.0-20210410081132-afb366fc7cd1 stdlib@go1.20.6	0.55.0 1.25.13

Open the chart page →

1,807

limogabe565

0.8.0

1 of 1 See more

limo gabe565 0.8.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/gabe565/limo :latest	6dfdbc9853bb	stdlib@go1.20.12	1.25.13

Open the chart page →

1,330

matrimonygabe565

0.7.0

1 of 1 See more

matrimony gabe565 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/gabe565/matrimony :latest	d39a9d7c3e1b	stdlib@go1.22.0	1.25.13

Open the chart page →

1,136

podgrabgabe565

0.5.2

1 of 1 See more

podgrab gabe565 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/akhilrex/podgrab :1.0.0	bce133f3f511	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.15.2	0.55.0 1.25.13

Open the chart page →

2,401

scanservjsgabe565

0.9.2

1 of 1 See more

scanservjs gabe565 0.9.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
sbs20/scanservjs :release-v3.0.3	dad1fd6e9a98	stdlib@go1.19.8	1.25.13

Open the chart page →

13,281

smarter-device-managergabe565

0.5.2

1 of 1 See more

smarter-device-manager gabe565 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
registry.gitlab.com/arm-research/smarter/smarter-device-manager :v1.20.11	826b984e75d4	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591 stdlib@go1.19.1	0.55.0 1.25.13

Open the chart page →

1,226

transsmutegabe565

1.1.0

1 of 1 See more

transsmute gabe565 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/gabe565/transsmute :latest	c8ac95a30c31	golang.org/x/net@v0.38.0 stdlib@go1.24.1	0.55.0 1.25.13

Open the chart page →

801

guacamolegabibbo97

0.3.0

1 of 3 See more

guacamole gabibbo97 0.3.0

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/postgres :13	4689940c6838	stdlib@go1.24.6	1.25.13

Open the chart page →

6,455

galoygaloymoney

0.34.7

4 of 24 See more

galoy galoymoney 0.34.7

4 of the 24 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
groundnuty/k8s-wait-for :v2.0	c14d7271e401	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.3	0.55.0 1.25.13
oryd/hydra :v2.2.0	2c93beb5e5f2	golang.org/x/net@v0.18.0 stdlib@go1.21.5	0.55.0 1.25.13
oryd/kratos :v1.0.0	d06fc5845f63	golang.org/x/net@v0.8.0 stdlib@go1.20.5	0.55.0 1.25.13
oryd/oathkeeper :v0.40.6	e8cb9b79a89c	golang.org/x/net@v0.9.0 stdlib@go1.20.5	0.55.0 1.25.13

Open the chart page →

8,700

galoy-depsgaloymoney

0.10.20

8 of 9 See more

galoy-deps galoymoney 0.10.20

8 of the 9 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ayushsobti/kube-monkey :v0.5.2	4c94e8f8924e	golang.org/x/net@v0.0.0-20220520000938-2e3eb7b945c2 stdlib@go1.18.9	0.55.0 1.25.13
otel/opentelemetry-collector-k8s :0.111.0	32b3c8296dcc	golang.org/x/net@v0.29.0 stdlib@go1.23.2	0.55.0 1.25.13
quay.io/jetstack/cert-manager-cainjector :v1.14.3	9395dec77fcf	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.55.0 1.25.13
quay.io/jetstack/cert-manager-controller :v1.14.3	64adcb95ce09	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.55.0 1.25.13
quay.io/jetstack/cert-manager-startupapicheck :v1.14.3	df8677135139	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.55.0 1.25.13
quay.io/jetstack/cert-manager-webhook :v1.14.3	d8ad5515f44f	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.55.0 1.25.13
registry.k8s.io/ingress-nginx/controller :v1.8.1	e5c4824e7375	golang.org/x/net@v0.10.0 stdlib@go1.20.5	0.55.0 1.25.13
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20230407	543c40fd0939	golang.org/x/net@v0.7.0 stdlib@go1.20.1	0.55.0 1.25.13

Open the chart page →

11,982

lndgaloymoney

0.10.6

1 of 3 See more

lnd galoymoney 0.10.6

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
lightninglabs/lnd :v0.18.3-beta	f86bbec4dfb3	golang.org/x/net@v0.24.0 stdlib@go1.22.5	0.55.0 1.25.13

Open the chart page →

2,161

monitoringgaloymoney

0.12.21

5 of 6 See more

monitoring galoymoney 0.12.21

5 of the 6 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
grafana/grafana :11.3.0	a0f881232a6f	golang.org/x/net@v0.29.0 stdlib@go1.23.1	0.55.0 1.25.13
quay.io/prometheus-operator/prometheus-config-reloader :v0.77.2	c96d4fb1d57f	golang.org/x/net@v0.29.0 stdlib@go1.23.2	0.55.0 1.25.13
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/net@v0.23.0 stdlib@go1.22.5	0.55.0 1.25.13
quay.io/prometheus/prometheus :v2.55.0	378f4e037035	golang.org/x/net@v0.28.0 stdlib@go1.23.2	0.55.0 1.25.13
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.13.0	639a1e2da549	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.55.0 1.25.13

Open the chart page →

5,316

galoygaloymoney2

0.34.7

4 of 24 See more

galoy galoymoney2 0.34.7

4 of the 24 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
groundnuty/k8s-wait-for :v2.0	c14d7271e401	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.3	0.55.0 1.25.13
oryd/hydra :v2.2.0	2c93beb5e5f2	golang.org/x/net@v0.18.0 stdlib@go1.21.5	0.55.0 1.25.13
oryd/kratos :v1.0.0	d06fc5845f63	golang.org/x/net@v0.8.0 stdlib@go1.20.5	0.55.0 1.25.13
oryd/oathkeeper :v0.40.6	e8cb9b79a89c	golang.org/x/net@v0.9.0 stdlib@go1.20.5	0.55.0 1.25.13

Open the chart page →

8,700

galoy-depsgaloymoney2

0.10.20

8 of 9 See more

galoy-deps galoymoney2 0.10.20

8 of the 9 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ayushsobti/kube-monkey :v0.5.2	4c94e8f8924e	golang.org/x/net@v0.0.0-20220520000938-2e3eb7b945c2 stdlib@go1.18.9	0.55.0 1.25.13
otel/opentelemetry-collector-k8s :0.111.0	32b3c8296dcc	golang.org/x/net@v0.29.0 stdlib@go1.23.2	0.55.0 1.25.13
quay.io/jetstack/cert-manager-cainjector :v1.14.3	9395dec77fcf	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.55.0 1.25.13
quay.io/jetstack/cert-manager-controller :v1.14.3	64adcb95ce09	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.55.0 1.25.13
quay.io/jetstack/cert-manager-startupapicheck :v1.14.3	df8677135139	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.55.0 1.25.13
quay.io/jetstack/cert-manager-webhook :v1.14.3	d8ad5515f44f	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.55.0 1.25.13
registry.k8s.io/ingress-nginx/controller :v1.8.1	e5c4824e7375	golang.org/x/net@v0.10.0 stdlib@go1.20.5	0.55.0 1.25.13
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20230407	543c40fd0939	golang.org/x/net@v0.7.0 stdlib@go1.20.1	0.55.0 1.25.13

Open the chart page →

11,982

lndgaloymoney2

0.10.6

1 of 3 See more

lnd galoymoney2 0.10.6

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
lightninglabs/lnd :v0.18.3-beta	f86bbec4dfb3	golang.org/x/net@v0.24.0 stdlib@go1.22.5	0.55.0 1.25.13

Open the chart page →

2,161

monitoringgaloymoney2

0.12.21

5 of 6 See more

monitoring galoymoney2 0.12.21

5 of the 6 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
grafana/grafana :11.3.0	a0f881232a6f	golang.org/x/net@v0.29.0 stdlib@go1.23.1	0.55.0 1.25.13
quay.io/prometheus-operator/prometheus-config-reloader :v0.77.2	c96d4fb1d57f	golang.org/x/net@v0.29.0 stdlib@go1.23.2	0.55.0 1.25.13
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/net@v0.23.0 stdlib@go1.22.5	0.55.0 1.25.13
quay.io/prometheus/prometheus :v2.55.0	378f4e037035	golang.org/x/net@v0.28.0 stdlib@go1.23.2	0.55.0 1.25.13
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.13.0	639a1e2da549	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.55.0 1.25.13

Open the chart page →

5,316

gameserver-operatorgameserver-operator

0.3.0

1 of 1 See more

gameserver-operator gameserver-operator 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/idebeijer/gameserver-operator :latest	1b099cfe9e5e	golang.org/x/net@v0.49.0 stdlib@go1.25.7	0.55.0 1.25.13

Open the chart page →

376

pagesgary-pages

1.0.0

1 of 3 See more

pages gary-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.13

Open the chart page →

20,262

alertmanager-discordgeek-cookbook

1.3.2

1 of 1 See more

alertmanager-discord geek-cookbook 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
rogerrum/alertmanager-discord :1.0.3	827593369625	stdlib@go1.17.4	1.25.13

Open the chart page →

1,045

anonaddygeek-cookbook

6.0.0

1 of 1 See more

anonaddy geek-cookbook 6.0.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
anonaddy/anonaddy :0.12.3	957a95565166	stdlib@go1.18.3	1.25.13

Open the chart page →

4,790

apache-musicindexgeek-cookbook

2.4.2

1 of 1 See more

apache-musicindex geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/apache-musicindex :v1.4.1-2	c9bd82dc5fda	stdlib@go1.18.4	1.25.13

Open the chart page →

14,716

autobrrgeek-cookbook

1.1.3

1 of 1 See more

autobrr geek-cookbook 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/autobrr/autobrr :v1.10.0	d4022cd32df5	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591 stdlib@go1.19.3	0.55.0 1.25.13

Open the chart page →

2,236

calibre-webgeek-cookbook

8.4.2

1 of 1 See more

calibre-web geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
linuxserver/calibre-web :version-0.6.12	938810eca3d3	stdlib@go1.16.7	1.25.13

Open the chart page →

16,221

dendritegeek-cookbook

6.4.0

1 of 1 See more

dendrite geek-cookbook 6.4.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/matrix-org/dendrite-monolith :v0.9.4	3267d27d392f	golang.org/x/net@v0.0.0-20220624214902-1bab6f366d9e stdlib@go1.18.5	0.55.0 1.25.13

Open the chart page →

2,144

duplicatigeek-cookbook

5.4.2

1 of 1 See more

duplicati geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/duplicati :latest	a792931146b4	stdlib@go1.24.9	1.25.13

Open the chart page →

1,793

embygeek-cookbook

3.4.2

1 of 1 See more

emby geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/emby :v4.6.1.0	5c6b8f91f1c4	stdlib@go1.15	1.25.13

Open the chart page →

8,597

gatusgeek-cookbook

1.1.2

1 of 1 See more

gatus geek-cookbook 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
twinproduction/gatus :v3.8.0	49dc0d9b2e2c	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.18.1	0.55.0 1.25.13

Open the chart page →

1,881

gonicgeek-cookbook

6.4.2

1 of 1 See more

gonic geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
sentriz/gonic :v0.13.1	a74012a6adf3	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e stdlib@go1.16.4	0.55.0 1.25.13

Open the chart page →

3,525

gotifygeek-cookbook

1.2.2

1 of 1 See more

gotify geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
gotify/server :2.1.4	09c79bc1e403	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.16	0.55.0 1.25.13

Open the chart page →

3,132

Container images carrying it

5,293 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/kubedb/kubedb-ops-manager :v0.53.0	6d4c9fe66e4f	stdlib@go1.25.12	1.25.13	4
ghcr.io/kubedb/kubedb-webhook-server :v0.42.0	f7dcade6523b	stdlib@go1.25.12	1.25.13	4
ghcr.io/kubestash/kubestash :v0.29.0	43e01ed32486	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.55.0 1.25.13	4
ghcr.io/linuxserver/plex :latest	7f9a1d574958	stdlib@go1.26.5	1.25.13	4
ghcr.io/loft-sh/vcluster-pro :0.0.0-ci-run.10	ab2e1fa19dd4	golang.org/x/net@v0.5.0 stdlib@go1.18.10	0.55.0 1.25.13	4
ghcr.io/sigstore/scaffolding/createtree :v0.7.31	e5232e8c9122	golang.org/x/net@v0.46.0 stdlib@go1.25.0	0.55.0 1.25.13	4
ghcr.io/synapsecns/sanguine/omnirpc :latest	5217e3d1fc70	golang.org/x/net@v0.35.0 stdlib@go1.22.4	0.55.0 1.25.13	4
quay.io/jetstack/cert-manager-cainjector :v1.13.1	72072d492b43	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.55.0 1.25.13	4
quay.io/jetstack/cert-manager-controller :v1.13.1	6b83f55bd99e	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.55.0 1.25.13	4
quay.io/jetstack/cert-manager-ctl :v1.13.1	c10bde7ff9ad	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.55.0 1.25.13	4
quay.io/jetstack/cert-manager-webhook :v1.13.1	48ea4a77dfa7	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.55.0 1.25.13	4
quay.io/prometheus/alertmanager :v0.25.0	fd4d9a3dd1fd	golang.org/x/net@v0.4.0 stdlib@go1.19.4	0.55.0 1.25.13	4
quay.io/prometheus/mysqld-exporter :latest :v0.20.0	abed8dac117b	stdlib@go1.26.5	1.25.13	4
quay.io/prometheus/node-exporter :v1.5.0	39c642b2b337	golang.org/x/net@v0.2.0 stdlib@go1.19.3	0.55.0 1.25.13	4
quay.io/prometheus/node-exporter :v1.9.1	d00a542e409e	golang.org/x/net@v0.37.0 stdlib@go1.23.7	0.55.0 1.25.13	4
quay.io/thanos/thanos :v0.42.4	b567818fe608	stdlib@go1.26.5	1.25.13	4
registry.k8s.io/autoscaling/vpa-admission-controller :1.7.1	be29624f7f12	stdlib@go1.26.5	1.25.13	4
registry.k8s.io/autoscaling/vpa-recommender :1.7.1	89cea705535f	stdlib@go1.26.5	1.25.13	4
registry.k8s.io/autoscaling/vpa-updater :1.7.1	feb42a526970	stdlib@go1.26.5	1.25.13	4
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20220916-gd32f8c343	39c5b2e3310d	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.19.1	0.55.0 1.25.13	4
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20221220-controller-v1.5.1-58-g787ea74b6	4d99688e5573	golang.org/x/net@v0.1.0 stdlib@go1.19.4	0.55.0 1.25.13	4
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.1.1	64d8c73dca98	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.16.9	0.55.0 1.25.13	4
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.6.0	c9f76a75fd00	golang.org/x/net@v0.41.0 stdlib@go1.24.4	0.55.0 1.25.13	4
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.16.0	e750cd4b43f7	golang.org/x/net@v0.40.0 stdlib@go1.24.4	0.55.0 1.25.13	4
registry.k8s.io/metrics-server/metrics-server :v0.9.0	d9862115e7c7	stdlib@go1.26.4	1.25.13	4
registry.k8s.io/prometheus-adapter/prometheus-adapter :v0.12.0	932eae60e2bc	golang.org/x/net@v0.24.0 stdlib@go1.22.2	0.55.0 1.25.13	4
registry.k8s.io/sig-storage/csi-attacher :v4.8.1	69888dba5815	golang.org/x/net@v0.34.0 stdlib@go1.23.1	0.55.0 1.25.13	4
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.13.0	d7138bcc3aa5	golang.org/x/net@v0.32.0 stdlib@go1.23.1	0.55.0 1.25.13	4
registry.k8s.io/sig-storage/csi-provisioner :v4.0.1	bf5a235b67d8	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.55.0 1.25.13	4
registry.k8s.io/sig-storage/livenessprobe :v2.16.0	88092d100909	golang.org/x/net@v0.40.0 stdlib@go1.24.2	0.55.0 1.25.13	4
registry.k8s.io/sig-storage/livenessprobe :v2.18.0	c4cc074199c0	golang.org/x/net@v0.49.0 stdlib@go1.25.7	0.55.0 1.25.13	4
registry.k8s.io/sig-storage/snapshot-controller :v8.6.0	81e79f205083	golang.org/x/net@v0.54.0 stdlib@go1.26.3	0.55.0 1.25.13	4
registry.k8s.io/sig-storage/snapshot-controller :v8.2.0	9dade8f2f3ab	golang.org/x/net@v0.31.0 stdlib@go1.23.1	0.55.0 1.25.13	4
alfhou/hammond :v0.0.24	c85dc0293aa1	golang.org/x/net@v0.0.0-20210410081132-afb366fc7cd1 stdlib@go1.20.6	0.55.0 1.25.13	3
alpine/git :latest :v2.54.0	6f3b5029566d	golang.org/x/net@v0.54.0 stdlib@go1.26.3	0.55.0 1.25.13	3
argoproj/argocd :v1.8.1	830e86cacefd	golang.org/x/net@v0.0.0-20201024042810-be3efd7ff127 stdlib@go1.14.12	0.55.0 1.25.13	3
bitnamilegacy/kubectl :latest	cd354d5b2556	golang.org/x/net@v0.41.0 stdlib@go1.24.5	0.55.0 1.25.13	3
bitnamilegacy/mongodb :6.0.4-debian-11-r10	016dce036593	golang.org/x/net@v0.0.0-20220906165146-f3363e06e74c stdlib@go1.17.10	0.55.0 1.25.13	3
bitnamilegacy/os-shell :12-debian-12-r51	77e65e9d633e	golang.org/x/net@v0.42.0 stdlib@go1.25.0	0.55.0 1.25.13	3
bitnami/mongodb :latest	9aa916500f02	stdlib@go1.26.5	1.25.13	3
caddy/ingress :v0.2.1	18d1366fc0e9	golang.org/x/net@v0.17.0 stdlib@go1.21.4	0.55.0 1.25.13	3
ciscolabs/rtsp-server :latest	b59fc10bb821	golang.org/x/net@v0.0.0-20220526153639-5463443f8c37 stdlib@go1.19.2	0.55.0 1.25.13	3
cloudflare/cloudflared :2026.8.3 :latest	51c9cefcb456	stdlib@go1.26.4	1.25.13	3
cloudpirates/image-minio :RELEASE.2025-10-15T17-29-55Z-hardened	8dc02a7e5093	golang.org/x/net@v0.47.0 stdlib@go1.25.7	0.55.0 1.25.13	3
cockroachdb/cockroach-self-signer-cert :1.10	07a49acec18d	golang.org/x/net@v0.38.0 stdlib@go1.23.12	0.55.0 1.25.13	3
csiplugin/csi-resizer :v1.2.0	36c31f7e1f43	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16	0.55.0 1.25.13	3
csiplugin/csi-snapshotter :v4.0.0	51f2dfde5bcc	golang.org/x/net@v0.0.0-20201209123823-ac852fbbde11 stdlib@go1.15	0.55.0 1.25.13	3
derailed/popeye :v0.22.1	8e68e22c7663	golang.org/x/net@v0.34.0 stdlib@go1.23.5	0.55.0 1.25.13	3
dgraph/dgraph :v21.12.0	3b55ea83fffe	golang.org/x/net@v0.0.0-20201021035429-f5854403a974 stdlib@go1.17.3	0.55.0 1.25.13	3
dnationcloud/kubernetes-jsonnet-translator :2.0.1	78fed4f3c130	stdlib@go1.26.5	1.25.13	3