CVE-2026-39821

High

Advisory

Published 22 May 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 8.2; base score, highest
EPSS: 0.007; 51st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 4,528; of 17,803 indexed, latest versions
Container images: 5,282; deployed by those charts
Fix available: 3 of 3; affected packages

Red Hat Security Advisory: git-lfs security update

Carried by container images the latest versions of 4,528 of 17,803 indexed charts deploy, on 5,282 images.

Affected package	Affected versions	Fixed in	Images
git-lfsrpm	2.13.3-3.el8_6	0:3.4.1-11.el8_10	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+190 more	1.25.13	5,243
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+220 more	0.55.0	3,683

OSV records: RHSA-2026:30853 GO-2026-5026

Charts affected

4,528 by stars

Chart

Latest

Affected images

Radar Score

cernboxsciencebox

0.0.4

1 of 6 See more

cernbox sciencebox 0.0.4

1 of the 6 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
cs3org/revad :v1.19.0	3b57a34a7dfd	golang.org/x/net@v0.0.0-20220325170049-de3da57026de stdlib@go1.17.3	0.55.0 1.25.13

Open the chart page →

2,340

ldap-instance-configsciencebox

0.0.1

1 of 1 See more

ldap-instance-config sciencebox 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
osixia/openldap :1.5.0	18742e9c449c	golang.org/x/net@v0.0.0-20201010224723-4f7140c49acb stdlib@go1.15.5	0.55.0 1.25.13

Open the chart page →

3,314

centralbrainsciencemesh

0.0.3

4 of 5 See more

centralbrain sciencemesh 0.0.3

4 of the 5 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
grafana/grafana :7.3.3	15b977f5207d	golang.org/x/net@v0.0.0-20200813134508-3edf25e44fcc stdlib@go1.15.1	0.55.0 1.25.13
jimmidyson/configmap-reload :v0.4.0	17d34fd73f9e	stdlib@go1.14.4	1.25.13
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120 stdlib@go1.14.4	0.55.0 1.25.13
quay.io/prometheus/prometheus :v2.22.1	b899dbd1b901	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0 stdlib@go1.15.3	0.55.0 1.25.13

Open the chart page →

9,771

sealed-secrets-uisealed-secrets-ui

0.0.8

1 of 1 See more

sealed-secrets-ui sealed-secrets-ui 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/noahburrell0/sealed-secrets-ui :v0.1.4	7e7368fb472d	golang.org/x/net@v0.6.0 stdlib@go1.19.4	0.55.0 1.25.13

Open the chart page →

4,747

hermitcrabseal-io

0.1.4

2 of 2 See more

hermitcrab seal-io 0.1.4

2 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
sealio/hermitcrab :v0.1.4	a326a2f03660	golang.org/x/net@v0.24.0 stdlib@go1.21.6	0.55.0 1.25.13
sealio/terraform-deployer :v1.5.7-seal.1	b0389d9848a5	golang.org/x/net@v0.7.0 stdlib@go1.20.7	0.55.0 1.25.13

Open the chart page →

4,890

searchpesearchpe

4.1.0

1 of 2 See more

searchpe searchpe 4.1.0

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/postgres :13.7	03652c675ae1	stdlib@go1.16.7	1.25.13

Open the chart page →

2,637

seashellsseashells

1.0.0

1 of 1 See more

seashells seashells 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
rokk42/seashells :1.0-k8s	dfc850a5db9e	golang.org/x/net@v0.25.0 stdlib@go1.22.3	0.55.0 1.25.13

Open the chart page →

827

seaweedfs-operatorseaweedfs-operator

1.5.8

2 of 3 See more

seaweedfs-operator seaweedfs-operator 1.5.8

2 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/nnstd/seaweedfs-operator :1.4	3ebe2fd253f6	golang.org/x/net@v0.42.0 stdlib@go1.24.5	0.55.0 1.25.13
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20231011-8b53cabe0	a7943503b45d	golang.org/x/net@v0.16.0 stdlib@go1.21.3	0.55.0 1.25.13

Open the chart page →

2,099

wallabagsebtiz13-charts

0.6.0

1 of 1 See more

wallabag sebtiz13-charts 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
wallabag/wallabag :2.6.14	4a527e027e0d	stdlib@go1.25.1	1.25.13

Open the chart page →

1,135

secret-managersecret-manager

1.0.0

3 of 4 See more

secret-manager secret-manager 1.0.0

3 of the 4 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
leonardomulticloud/svc-vault :v1.0.0	e4acd2fbb7b1	stdlib@go1.23.1	1.25.13
leonardomulticloud/webhook :v1.0.0	d119918900e8	golang.org/x/net@v0.26.0 stdlib@go1.22.6	0.55.0 1.25.13
library/mysql :9.0.1	92dc86967801	stdlib@go1.18.2	1.25.13

Open the chart page →

5,505

secrets-bridgesecrets-bridge

0.2.0

1 of 1 See more

secrets-bridge secrets-bridge 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/haydercyber/secrets-bridge :0.2.0	4709f1bb3039	golang.org/x/net@v0.47.0 stdlib@go1.24.13	0.55.0 1.25.13

Open the chart page →

387

aws-secretssecretsprovider

0.1.0

1 of 1 See more

aws-secrets secretsprovider 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
public.ecr.aws/aws-secrets-manager/secrets-store-csi-driver-provider-aws :1.0.r1-10-g1942553-2021.06.04.00.07-linux-amd64	b32c99e7bc45	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.8	0.55.0 1.25.13

Open the chart page →

2,220

secretssecrets-proxy

1.0.6

1 of 1 See more

secrets secrets-proxy 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
udhos/secrets :1.0.6	daa2b4eaac09	golang.org/x/net@v0.39.0 stdlib@go1.24.2	0.55.0 1.25.13

Open the chart page →

1,148

secret-syncsecret-sync

0.1.11

1 of 1 See more

secret-sync secret-sync 0.1.11

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
csepulvedab/secret-sync :0.5	227a6f2b0ff8	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.4	0.55.0 1.25.13

Open the chart page →

1,443

cloudflaredsectionme

2022.3.4

1 of 1 See more

cloudflared sectionme 2022.3.4

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
quay.io/giantswarm/cloudflared :2022.3.4	0b20d2fe9a6b	golang.org/x/net@v0.0.0-20220114011407-0dd24b26b47d stdlib@go1.17.1	0.55.0 1.25.13

Open the chart page →

2,440

influxdb_exportersectionme

0.0.2

1 of 1 See more

influxdb_exporter sectionme 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
quay.io/prometheus/influxdb-exporter :v0.10.0	3854d8af7bd4	stdlib@go1.18.3	1.25.13

Open the chart page →

922

operatorsecurecodebox-operator

5.8.0

1 of 2 See more

operator securecodebox-operator 5.8.0

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
securecodebox/operator :5.8.0	c14bd5c550e3	stdlib@go1.26.4	1.25.13

Open the chart page →

100

security-smellssecurity-smells

0.1.0

1 of 1 See more

security-smells security-smells 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
durellirsd/security-smells-api :v1	7398aca4fc2e	golang.org/x/net@v0.23.0 stdlib@go1.22.4	0.55.0 1.25.13

Open the chart page →

1,425

pagessekharpkube

1.0.0

1 of 3 See more

pages sekharpkube 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.13

Open the chart page →

20,261

seldon-core-analyticsseldon

1.17.1

4 of 8 See more

seldon-core-analytics seldon 1.17.1

4 of the 8 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
grafana/grafana :7.0.3	d72946c8e5d5	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.3	0.55.0 1.25.13
prom/alertmanager :v0.20.0	7e4e9f7a0954	golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80 stdlib@go1.13.5	0.55.0 1.25.13
prom/prometheus :v2.18.1	5880ec936055	golang.org/x/net@v0.0.0-20200421231249-e086a090c8fd stdlib@go1.14.2	0.55.0 1.25.13
prom/pushgateway :v1.0.1	a5df60347882	stdlib@go1.13.5	1.25.13

Open the chart page →

10,749

postgresself-hosters-by-night

0.14.3

1 of 1 See more

postgres self-hosters-by-night 0.14.3

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/postgres :18.1	1090bc3a8ccf	stdlib@go1.24.6	1.25.13

Open the chart page →

2,434

semaphoresemaphore-light

1.0.0

1 of 1 See more

semaphore semaphore-light 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
semaphoreui/semaphore :latest	3996804607eb	golang.org/x/net@v0.47.0 stdlib@go1.23.3	0.55.0 1.25.13

Open the chart page →

1,867

sentry-kubernetessentry

0.4.0

1 of 1 See more

sentry-kubernetes sentry 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/getsentry/sentry-kubernetes :latest	c88fec0dde4a	stdlib@go1.26.4	1.25.13

Open the chart page →

ansible-semaphoresergiotocalini

1.2.0

1 of 1 See more

ansible-semaphore sergiotocalini 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
semaphoreui/semaphore :v2.9.64	5b50bc11833f	golang.org/x/net@v0.21.0 stdlib@go1.21.8	0.55.0 1.25.13

Open the chart page →

3,336

cortezasergiotocalini

1.0.1

1 of 1 See more

corteza sergiotocalini 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
cortezaproject/corteza :2024.9.6	0bcdcbcd3c63	golang.org/x/net@v0.33.0 stdlib@go1.24.1	0.55.0 1.25.13

Open the chart page →

3,346

miniosergiotocalini

1.0.0

1 of 1 See more

minio sergiotocalini 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
quay.io/minio/minio :RELEASE.2023-07-21T21-12-44Z	8e5e9490cd50	golang.org/x/net@v0.12.0 stdlib@go1.19.11	0.55.0 1.25.13

Open the chart page →

4,351

rdpgwsergiotocalini

1.0.0

1 of 1 See more

rdpgw sergiotocalini 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
bolkedebruin/rdpgw :master	c0dc0589373a	golang.org/x/net@v0.48.0 stdlib@go1.24.13	0.55.0 1.25.13

Open the chart page →

687

service-binding-operatorservice-binding-operator-helm-chart

1.4.1

1 of 1 See more

service-binding-operator service-binding-operator-helm-chart 1.4.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
quay.io/redhat-developer/servicebinding-operatordigest-pinned	16286ac84ddd	golang.org/x/net@v0.17.0 stdlib@go1.20.6	0.55.0 1.25.13

Open the chart page →

796

serviceexampleserviceexample

0.1.0

3 of 5 See more

serviceexample serviceexample 0.1.0

3 of the 5 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/nats :2.9.20-alpine	d6c6ae7df4a0	stdlib@go1.19.11	1.25.13
natsio/nats-box :0.13.5	59cf2e949181	stdlib@go1.19.5	1.25.13
natsio/nats-server-config-reloader :0.11.0	c3a755eab2cc	stdlib@go1.20.5	1.25.13

Open the chart page →

5,451

service-exampleservice-example-1

0.1.0

5 of 7 See more

service-example service-example-1 0.1.0

5 of the 7 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/mongo :latest	5211c51171f5	stdlib@go1.26.5	1.25.13
library/nats :2.9.11-alpine	ccbe811b8575	stdlib@go1.19.4	1.25.13
natsio/nats-box :0.13.3	c507bd7e3831	golang.org/x/net@v0.4.0 stdlib@go1.19.4	0.55.0 1.25.13
natsio/nats-server-config-reloader :0.8.0	6bdaceb63aa5	stdlib@go1.19.4	1.25.13
natsio/prometheus-nats-exporter :0.10.1	bce728062c4f	stdlib@go1.19.3	1.25.13

Open the chart page →

9,132

serviceexampleserviceexample-chart

0.3.0

1 of 4 See more

serviceexample serviceexample-chart 0.3.0

1 of the 4 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/mongo :latest	5211c51171f5	stdlib@go1.26.5	1.25.13

Open the chart page →

4,084

serviceexampleservice-example-helm-chart

0.1.0

1 of 4 See more

serviceexample service-example-helm-chart 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/mongo :latest	5211c51171f5	stdlib@go1.26.5	1.25.13

Open the chart page →

2,332

service-exampleservice-example-jt

0.1.1

5 of 9 See more

service-example service-example-jt 0.1.1

5 of the 9 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
bitnami/mongodb :latest	11ece5ac9685	stdlib@go1.26.5	1.25.13
library/nats :2.12.2-alpine	2d5fce3229ae	stdlib@go1.25.4	1.25.13
natsio/nats-box :0.19.2	8031d190c7ee	golang.org/x/net@v0.44.0 stdlib@go1.25.2	0.55.0 1.25.13
natsio/nats-server-config-reloader :0.20.1	47094fcae2f4	stdlib@go1.24.8	1.25.13
natsio/prometheus-nats-exporter :0.17.3	26c826662ac8	stdlib@go1.24.2	1.25.13

Open the chart page →

7,584

ccx-monitoringseveralnines

0.6.21

5 of 7 See more

ccx-monitoring severalnines 0.6.21

5 of the 7 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
grafana/grafana :12.3.1	2175aaa91c96	golang.org/x/net@v0.46.0 stdlib@go1.25.5	0.55.0 1.25.13
victoriametrics/victoria-metrics :v1.120.0	a1cb2f3dfd45	golang.org/x/net@v0.40.0 stdlib@go1.24.4	0.55.0 1.25.13
victoriametrics/vmalert :v1.96.0	150cd08fde94	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.55.0 1.25.13
quay.io/prometheus/alertmanager :v0.26.0	361db356b330	golang.org/x/net@v0.10.0 stdlib@go1.20.7	0.55.0 1.25.13
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.10.1	af8220f53493	golang.org/x/net@v0.17.0 stdlib@go1.20.10	0.55.0 1.25.13

Open the chart page →

7,740

apache-shardingsphere-operator-chartsshardingsphere

0.3.0

1 of 2 See more

apache-shardingsphere-operator-charts shardingsphere 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
apache/shardingsphere-operator :0.3.0	ffe68d6b99c0	golang.org/x/net@v0.10.0 stdlib@go1.19.10	0.55.0 1.25.13

Open the chart page →

1,699

first-chartshashkist-test

0.1.0

1 of 3 See more

first-chart shashkist-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/mysql :latest	66aec17cd21a	stdlib@go1.24.6	1.25.13

Open the chart page →

3,088

operatorshopware-store

1.8.1

1 of 1 See more

operator shopware-store 1.8.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/shopware/shopware-operator :1.8.1	87db0eda7a03	golang.org/x/net@v0.38.0 stdlib@go1.26.0	0.55.0 1.25.13

Open the chart page →

571

shopwareshopware-store

2.1.2

1 of 5 See more

shopware shopware-store 2.1.2

1 of the 5 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
percona/percona-xtradb-cluster-operator :1.14.0	3232ae01d0ff	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.55.0 1.25.13

Open the chart page →

4,132

bffshortlink

0.2.1

1 of 1 See more

bff shortlink 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
registry.gitlab.com/shortlink-org/shortlink/bff :latest	f2194e526915	golang.org/x/net@v0.49.0 stdlib@go1.25.7	0.55.0 1.25.13

Open the chart page →

1,698

linkshortlink

0.7.3

1 of 1 See more

link shortlink 0.7.3

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
registry.gitlab.com/shortlink-org/shortlink/link :latest	86d87291ffd4	golang.org/x/net@v0.49.0 stdlib@go1.25.7	0.55.0 1.25.13

Open the chart page →

1,682

pagesshrutiujlan-pages

1.0.0

1 of 3 See more

pages shrutiujlan-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.13

Open the chart page →

20,261

findmydevicesi-gitops

0.14.0

1 of 1 See more

findmydevice si-gitops 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
registry.gitlab.com/fmd-foss/fmd-server :0.16.0-distroless	bb57d6982fea	stdlib@go1.26.4	1.25.13

Open the chart page →

hedgedocsi-gitops

0.12.3

1 of 2 See more

hedgedoc si-gitops 0.12.3

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/postgres :18.4	3a82e1f56c8f	stdlib@go1.24.6	1.25.13

Open the chart page →

2,700

nut-exportersi-gitops

0.5.0

1 of 1 See more

nut-exporter si-gitops 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/druggeri/nut_exporter :3.3.0	276460d141c7	golang.org/x/net@v0.35.0 stdlib@go1.26.3	0.55.0 1.25.13

Open the chart page →

811

backendsignalen

4.24.0

2 of 4 See more

backend signalen 4.24.0

2 of the 4 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :14.4.0-debian-11-r23	7e7ebb082031	stdlib@go1.16.7	1.25.13
bitnamilegacy/rabbitmq :3.10.7-debian-11-r4	cf93e2772250	stdlib@go1.16.7	1.25.13

Open the chart page →

11,751

alertmanagersignoz

0.5.2

1 of 1 See more

alertmanager signoz 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
signoz/alertmanager :0.5.0	7bc7de2e33c2	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985 stdlib@go1.14	0.55.0 1.25.13

Open the chart page →

2,182

postgresqlsignoz

0.0.2

1 of 1 See more

postgresql signoz 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/postgres :15	9b1d34adbce1	stdlib@go1.24.6	1.25.13

Open the chart page →

1,686

zookeepersignoz

0.0.1

1 of 1 See more

zookeeper signoz 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
signoz/zookeeper :3.7.1	fcc4a3288154	stdlib@go1.21.2	1.25.13

Open the chart page →

2,923

local-static-provisionersig-storage-local-static-provisioner

2.9.0

1 of 1 See more

local-static-provisioner sig-storage-local-static-provisioner 2.9.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/local-volume-provisioner :v2.9.0	f9d65db8bda2	stdlib@go1.25.5	1.25.13

Open the chart page →

1,280

ctlogsigstore

0.2.68

3 of 4 See more

ctlog sigstore 0.2.68

3 of the 4 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/sigstore/scaffolding/createctconfig :v0.7.31	3a061734c5be	golang.org/x/net@v0.46.0 stdlib@go1.25.0	0.55.0 1.25.13
ghcr.io/sigstore/scaffolding/createtree :v0.7.31	e5232e8c9122	golang.org/x/net@v0.46.0 stdlib@go1.25.0	0.55.0 1.25.13
ghcr.io/sigstore/scaffolding/ct_server :v0.7.31	66664ba563e7	golang.org/x/net@v0.46.0 stdlib@go1.25.0	0.55.0 1.25.13

Open the chart page →

2,749

Container images carrying it

5,282 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
ethpandaops/tracoor :latest	d8514b9f4c59	golang.org/x/net@v0.40.0 stdlib@go1.24.13	0.55.0 1.25.13	3
goharbor/harbor-core :v2.15.2	d7b780d23721	stdlib@go1.26.4	1.25.13	3
goharbor/harbor-jobservice :v2.15.2	f71a4452a095	stdlib@go1.26.4	1.25.13	3
goharbor/harbor-registryctl :v2.15.2	223d5cb49d5d	golang.org/x/net@v0.54.0 stdlib@go1.26.4	0.55.0 1.25.13	3
goharbor/registry-photon :v2.15.2	c4ebef61ceb5	golang.org/x/net@v0.54.0 stdlib@go1.26.4	0.55.0 1.25.13	3
goharbor/trivy-adapter-photon :v2.15.2	215c07b71c37	stdlib@go1.26.4	1.25.13	3
grafana/grafana :8.2.5	00568d89c4f8	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985 stdlib@go1.17	0.55.0 1.25.13	3
grafana/grafana :11.0.0	0dc5a246ab16	golang.org/x/net@v0.23.0 stdlib@go1.21.10	0.55.0 1.25.13	3
grafana/grafana :13.2.1-distroless	3600073f45a9	golang.org/x/net@v0.51.0 stdlib@go1.26.4	0.55.0 1.25.13	3
grafana/grafana :13.1.1	7cb8c64c4d57	golang.org/x/net@v0.49.0 stdlib@go1.26.3	0.55.0 1.25.13	3
grafana/grafana :11.3.0	a0f881232a6f	golang.org/x/net@v0.29.0 stdlib@go1.23.1	0.55.0 1.25.13	3
grafana/loki :3.4.2	58a6c186ce78	golang.org/x/net@v0.34.0 stdlib@go1.23.6	0.55.0 1.25.13	3
grafana/loki :3.7.7 :latest	d70e4659623f	stdlib@go1.26.5	1.25.13	3
grafana/loki-canary :3.6.7	0dac7d5cb383	golang.org/x/net@v0.47.0 stdlib@go1.24.13	0.55.0 1.25.13	3
grafana/promtail :2.4.2	626900031c4e	golang.org/x/net@v0.0.0-20211101193420-4a448f8816b3 stdlib@go1.17.2	0.55.0 1.25.13	3
groundnuty/k8s-wait-for :v2.0	c14d7271e401	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.3	0.55.0 1.25.13	3
hashicorp/http-echo :1.0.0 :latest	fcb75f691c8b	stdlib@go1.21.1	1.25.13	3
jacobalberty/unifi :v10.0.162	896c0ab82d33	stdlib@go1.24.6	1.25.13	3
jaegertracing/all-in-one :latest	ab6f1a1f0fb4	golang.org/x/net@v0.47.0 stdlib@go1.25.4	0.55.0 1.25.13	3
kubegems/kubegems :v1.24.10	a730bcf9322a	golang.org/x/net@v0.19.0 stdlib@go1.24.10	0.55.0 1.25.13	3
library/docker :20.10-dind :20-dind	af96c680a7e1	golang.org/x/net@v0.4.0 stdlib@go1.19.7	0.55.0 1.25.13	3
library/mariadb :12.3.3	ab1c3dd38194	stdlib@go1.24.6	1.25.13	3
library/mysql :latest	66aec17cd21a	stdlib@go1.24.6	1.25.13	3
library/nats :2.10-alpine	b83efabe3e7d	stdlib@go1.24.2	1.25.13	3
library/postgres :14.1	3162a6ead070	stdlib@go1.16.7	1.25.13	3
library/postgres :15.7-alpine :15.7-alpine3.20	468d34fefd63	stdlib@go1.18.2	1.25.13	3
library/postgres :11	5d2aa4a7b5f9	stdlib@go1.16.7	1.25.13	3
library/postgres :14-alpine	727876d27466	stdlib@go1.24.6	1.25.13	3
library/redis :7.2.4-alpine	c8bb255c3559	stdlib@go1.18.2	1.25.13	3
louislam/uptime-kuma :2.5.4	917318f9d7be	stdlib@go1.20.5	1.25.13	3
mcp/grafana :latest	9362bcf6aa0e	stdlib@go1.26.5	1.25.13	3
migrate/migrate :latest	cc4ad8e19d66	golang.org/x/net@v0.47.0 stdlib@go1.25.4	0.55.0 1.25.13	3
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	golang.org/x/net@v0.0.0-20201216054612-986b41b23924 stdlib@go1.15.7	0.55.0 1.25.13	3
mintel/dex-k8s-authenticator :1.4.0	caf71cee7b9a	golang.org/x/net@v0.0.0-20190522155817-f3200d17e092 stdlib@go1.13.11	0.55.0 1.25.13	3
natsio/nats-box :0.19.2	8031d190c7ee	golang.org/x/net@v0.44.0 stdlib@go1.25.2	0.55.0 1.25.13	3
natsio/nats-box :0.19.7	ffce8bd10338	golang.org/x/net@v0.53.0 stdlib@go1.26.3	0.55.0 1.25.13	3
natsio/nats-server-config-reloader :0.13.0	b3359eeb10bf	stdlib@go1.20.5	1.25.13	3
neosmemo/memos :0.30.0	71a5b4738d1b	golang.org/x/net@v0.53.0 stdlib@go1.26.2	0.55.0 1.25.13	3
opencsghq/postgres :15.19	b98600564e07	stdlib@go1.24.6	1.25.13	3
opencsghq/stakater-reloader :v1.4.19	0491782f7bac	stdlib@go1.26.4	1.25.13	3
oryd/hydra :v2.2.0	2c93beb5e5f2	golang.org/x/net@v0.18.0 stdlib@go1.21.5	0.55.0 1.25.13	3
prom/alertmanager :v0.28.0	d5155cfac40a	golang.org/x/net@v0.33.0 stdlib@go1.23.4	0.55.0 1.25.13	3
prom/memcached-exporter :v0.14.2	d8a61419b841	golang.org/x/net@v0.17.0 stdlib@go1.21.5	0.55.0 1.25.13	3
prom/prometheus :v3.0.1	565ee8650122	golang.org/x/net@v0.30.0 stdlib@go1.23.3	0.55.0 1.25.13	3
prom/prometheus :v2.19.0	bfad037f95e5	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9 stdlib@go1.14.4	0.55.0 1.25.13	3
prom/pushgateway :v1.2.0	0a9031142481	stdlib@go1.13.8	1.25.13	3
prom/pushgateway :v1.3.1	8305a33fb80a	stdlib@go1.15.6	1.25.13	3
prom/statsd-exporter :v0.28.0	4e7a1f00b9b2	golang.org/x/net@v0.29.0 stdlib@go1.23.2	0.55.0 1.25.13	3
prom/statsd-exporter :v0.18.0	d23aca343b86	stdlib@go1.14.7	1.25.13	3
rancher/kubectl :v1.34.1	090bef429ed1	golang.org/x/net@v0.38.0 stdlib@go1.24.6	0.55.0 1.25.13	3