StackRadar

CVE-2026-39821

High

Advisory

Published 22 May 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.2
base score, highest
EPSS
0.007
51st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
4,642
of 17,813 indexed, latest versions
Container images
5,366
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: git-lfs security update

Carried by container images the latest versions of 4,642 of 17,813 indexed charts deploy, on 5,366 images.

Affected packageAffected versionsFixed inImages
git-lfsrpm2.13.3-3.el8_60:3.4.1-11.el8_101
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+191 more1.25.135,324
golang.org/x/netgolangv0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+220 more0.55.03,744
OSV records
RHSA-2026:30853GO-2026-5026

Charts affected

4,642 by stars
ChartLatestAffected imagesRadar Score
go-kube-downscalerpy-kube-downscalerVerified publisher1.3.41 of 1See more

go-kube-downscaler py-kube-downscaler 1.3.4

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/caas-team/gokubedownscaler:1.3.4cea3dd2f1312
golang.org/x/net@v0.49.0
stdlib@go1.25.10
0.55.0
1.25.13

Open the chart page →

234
phpqonstruktVerified publisher0.2.01 of 1See more

php qonstrukt 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
qonstrukt/php:8.4-v8-apache089af7925aa1
golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e
stdlib@go1.26.4
0.55.0
1.25.13

Open the chart page →

56,582
qt-vaultqt-vaultVerified publisher0.1.21 of 1See more

qt-vault qt-vault 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/mcman2017/qt-vault:v0.1.2852edf54c850
golang.org/x/net@v0.38.0
stdlib@go1.24.11
0.55.0
1.25.13

Open the chart page →

305
minecraft-serverqumine0.1.15001 of 1See more

minecraft-server qumine 0.1.1500

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
qumine/minecraft-server:v0.1.15c0b650d51132
golang.org/x/net@v0.0.0-20220909164309-bea034e7d591
stdlib@go1.19.4
0.55.0
1.25.13

Open the chart page →

6,930
rabbitmqrabbitmq-magefleet1.2.01 of 1See more

rabbitmq rabbitmq-magefleet 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
library/rabbitmq:4.1.0-management935b3f84c1e4
stdlib@go1.22.2
1.25.13

Open the chart page →

2,854
jobs-managerraczylo-comVerified publisher0.1.151 of 1See more

jobs-manager raczylo-com 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/lukaszraczylo/jobs-manager-operator:0.1.15e6239e2838d7
golang.org/x/net@v0.49.0
stdlib@go1.25.0
0.55.0
1.25.13

Open the chart page →

501
kube-images-syncraczylo-comVerified publisher0.5.571 of 1See more

kube-images-sync raczylo-com 0.5.57

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/lukaszraczylo/kubernetes-images-sync-operator:0.5.57a424948c8143
golang.org/x/net@v0.48.0
stdlib@go1.25.5
0.55.0
1.25.13

Open the chart page →

415
velero-s3-deploymentradar-baseVerified publisher0.4.22 of 4See more

velero-s3-deployment radar-base 0.4.2

2 of the 4 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
velero/velero:v1.9.0277fbfaf8dcf
golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023
stdlib@go1.18
0.55.0
1.25.13
velero/velero-plugin-for-aws:v1.5.03d2ea7aab32d
golang.org/x/net@v0.0.0-20210614182718-04defd469f4e
stdlib@go1.17.11
0.55.0
1.25.13

Open the chart page →

3,729
ravendb-operatorravendb-operatorOfficialVerified publisher2.1.01 of 1See more

ravendb-operator ravendb-operator 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ravendb/ravendb-operator:2.1.0511050205ac5
golang.org/x/net@v0.48.0
0.55.0

Open the chart page →

355
rbac-serverrbac-server1.19.11 of 1See more

rbac-server rbac-server 1.19.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/rbac-server:1.19.1df1adeb86679
golang.org/x/net@v0.38.0
stdlib@go1.23.12
0.55.0
1.25.13

Open the chart page →

705
rclonercloneVerified publisher2.2.01 of 1See more

rclone rclone 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
rclone/rclone:1.6874c51b8817e5
golang.org/x/net@v0.27.0
stdlib@go1.23.3
0.55.0
1.25.13

Open the chart page →

1,680
redis-enterprise-operatorredis-enterprise-operatorVerified publisher7.13.4-121 of 1See more

redis-enterprise-operator redis-enterprise-operator 7.13.4-12

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
redislabs/operator:7.4.2-2ecb101af0506
golang.org/x/net@v0.19.0
stdlib@go1.21.5
0.55.0
1.25.13

Open the chart page →

2,637
redis-chartredis-ha-chartVerified publisher0.1.51 of 2See more

redis-chart redis-ha-chart 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
truebyteinnovationllp/redis-exporter:v1.86.01c6a945af653
stdlib@go1.25.11
1.25.13

Open the chart page →

231
redis-sentinel-gatewayredis-sentinel-gatewayVerified publisher1.0.21 of 1See more

redis-sentinel-gateway redis-sentinel-gateway 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
promzeus/redis-sentinel-gateway:v182f6d56e280b
golang.org/x/net@v0.26.0
stdlib@go1.22.6
0.55.0
1.25.13

Open the chart page →

2,710
redmineredmine-helm-chartVerified publisher0.2.61 of 1See more

redmine redmine-helm-chart 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
library/redmine:6.1.3-trixief474a901faec
stdlib@go1.24.6
1.25.13

Open the chart page →

4,407
kminionredpanda-dataOfficialVerified publisher0.15.21 of 1See more

kminion redpanda-data 0.15.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
redpandadata/kminion:v2.3.0c05fa976428e
golang.org/x/net@v0.49.0
stdlib@go1.25.8
0.55.0
1.25.13

Open the chart page →

924
docker-registry-mirrorregistry-mirror1.0.11 of 1See more

docker-registry-mirror registry-mirror 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
library/registry:2.8.3a3d8aaa63ed8
stdlib@go1.20.8
1.25.13

Open the chart page →

550
reportportalreportportal-ioOfficialVerified publisher26.8.127 of 15See more

reportportal reportportal-io 26.8.12

7 of the 15 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2025.7.23-debian-12-r08935e75fa5d1
golang.org/x/net@v0.39.0
stdlib@go1.24.2
0.55.0
1.25.13
library/postgres:18.4a02db8cac496
stdlib@go1.24.6
1.25.13
library/rabbitmq:4.3.4-managementeb5295d08332
stdlib@go1.22.2
1.25.13
rancher/kubectl:v1.36.206c7a7a97727
golang.org/x/net@v0.49.0
stdlib@go1.26.4
0.55.0
1.25.13
reportportal/k8s-wait-for:latest06cdf299b397
golang.org/x/net@v0.49.0
stdlib@go1.26.4
0.55.0
1.25.13
reportportal/migrations:5.15.4464468240d7b
golang.org/x/net@v0.38.0
stdlib@go1.24.6
0.55.0
1.25.13
reportportal/service-index:5.15.1b1860ed33071
golang.org/x/net@v0.54.0
stdlib@go1.26.2
0.55.0
1.25.13

Open the chart page →

12,320
reservation-appreservation-app1.0.91 of 4See more

reservation-app reservation-app 1.0.9

1 of the 4 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
library/postgres:9.6caddd35b05cd
stdlib@go1.16.7
1.25.13

Open the chart page →

6,649
resurfaceresurfaceioVerified publisher3.9.02 of 3See more

resurface resurfaceio 3.9.0

2 of the 3 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
haproxytech/kubernetes-ingress:1.11.4c5f8a41ef0d4
golang.org/x/net@v0.21.0
stdlib@go1.22.2
0.55.0
1.25.13
resurfaceio/resurface:3.7.84d5cda2f64109
stdlib@go1.23.0
1.25.13

Open the chart page →

7,247
retyc-csiretyc-csi0.2.02 of 3See more

retyc-csi retyc-csi 0.2.0

2 of the 3 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.17.0f9de845b1701
golang.org/x/net@v0.54.0
stdlib@go1.26.3
0.55.0
1.25.13
registry.k8s.io/sig-storage/csi-provisioner:v6.3.0a4b0b1a37605
stdlib@go1.26.3
1.25.13

Open the chart page →

1,419
right-sizerright-sizer0.6.21 of 1See more

right-sizer right-sizer 0.6.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
aavishay/right-sizer:0.6.23d7c4d79595c
golang.org/x/net@v0.48.0
stdlib@go1.25.8
0.55.0
1.25.13

Open the chart page →

291
backup-repository-serverriotkit-org4.0.01 of 1See more

backup-repository-server riotkit-org 4.0.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/riotkit-org/backup-repository:v4.0.0ab41ffa78f69
golang.org/x/net@v0.0.0-20220401154927-543a649e0bdd
stdlib@go1.17.13
0.55.0
1.25.13

Open the chart page →

2,057
rke2-canalrke2-charts3.13.32 of 2See more

rke2-canal rke2-charts 3.13.3

2 of the 2 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
rancher/hardened-calico:v3.13.36d2cd61a338b
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
0.55.0
rancher/hardened-flannel:v0.13.0-rancher142784bb38ed3
golang.org/x/net@v0.0.0-20190311183353-d8887717615a
0.55.0

Open the chart page →

7,005
rke2-ingress-nginxrke2-charts4.15.1102 of 2See more

rke2-ingress-nginx rke2-charts 4.15.110

2 of the 2 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
rancher/kube-webhook-certgen:v1.14.5-hardened26bb869baf40b
golang.org/x/net@v0.52.0
stdlib@go1.26.2
0.55.0
1.25.13
rancher/nginx-ingress-controller:v1.14.5-hardened26cbc1e932b5b
golang.org/x/net@v0.52.0
stdlib@go1.24.13
0.55.0
1.25.13

Open the chart page →

734
cloudflare-tunnelrlex0.8.01 of 1See more

cloudflare-tunnel rlex 0.8.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2023.10.0c18744ae1767
golang.org/x/net@v0.12.0
stdlib@go1.20.6
0.55.0
1.25.13

Open the chart page →

1,723
hcloud-fip-controllerrlex0.2.51 of 1See more

hcloud-fip-controller rlex 0.2.5

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
cbeneke/hcloud-fip-controller:v0.4.1dc658078d7ba
golang.org/x/net@v0.0.0-20200114155413-6afb5195e5aa
stdlib@go1.15.3
0.55.0
1.25.13

Open the chart page →

2,964
prometheus-webhook-dingtalkrlex0.0.31 of 1See more

prometheus-webhook-dingtalk rlex 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
timonwong/prometheus-webhook-dingtalk:v1.4.0a0fcc028bd8d
stdlib@go1.13.5
1.25.13

Open the chart page →

1,853
dev-feedrm3lVerified publisher3.1.21 of 3See more

dev-feed rm3l 3.1.2

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:11.4.3-debian-12-r08b3778160e34
stdlib@go1.22.6
1.25.13

Open the chart page →

9,969
kimai2robjuz5.0.141 of 2See more

kimai2 robjuz 5.0.14

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:10.6.12-debian-11-r1678847062532a
stdlib@go1.19.7
1.25.13

Open the chart page →

4,765
grafanaromanow-helm-chartsVerified publisher1.7.11 of 1See more

grafana romanow-helm-charts 1.7.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
grafana/grafana:8.3.4cf81d2c753c8
golang.org/x/net@v0.0.0-20210903162142-ad29c8ab022f
stdlib@go1.17.6
0.55.0
1.25.13

Open the chart page →

2,843
jaeger-collectorromanow-helm-chartsVerified publisher1.5.01 of 1See more

jaeger-collector romanow-helm-charts 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
jaegertracing/jaeger-collector:1.41.0ff81f0a9f63c
golang.org/x/net@v0.4.0
stdlib@go1.19.4
0.55.0
1.25.13

Open the chart page →

1,861
jaeger-queryromanow-helm-chartsVerified publisher1.5.01 of 1See more

jaeger-query romanow-helm-charts 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
jaegertracing/jaeger-query:1.41.0b636f0f464bc
golang.org/x/net@v0.4.0
stdlib@go1.19.4
0.55.0
1.25.13

Open the chart page →

1,804
kube-state-metricsromanow-helm-chartsVerified publisher1.7.21 of 1See more

kube-state-metrics romanow-helm-charts 1.7.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
bitnamilegacy/kube-state-metrics:204a3044b384b
golang.org/x/net@v0.40.0
stdlib@go1.24.5
0.55.0
1.25.13

Open the chart page →

2,725
logstashromanow-helm-chartsVerified publisher1.5.01 of 1See more

logstash romanow-helm-charts 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
library/logstash:7.17.817a4f64e9cf5
stdlib@go1.19.3
1.25.13

Open the chart page →

7,607
node-exporterromanow-helm-chartsVerified publisher1.7.11 of 1See more

node-exporter romanow-helm-charts 1.7.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
quay.io/prometheus/node-exporter:v1.8.1fa7fa12a57ef
golang.org/x/net@v0.23.0
stdlib@go1.22.3
0.55.0
1.25.13

Open the chart page →

845
postgresromanow-helm-chartsVerified publisher1.7.11 of 1See more

postgres romanow-helm-charts 1.7.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
library/postgres:15dfbbb0ad8cab
stdlib@go1.24.6
1.25.13

Open the chart page →

1,270
prometheusromanow-helm-chartsVerified publisher1.7.21 of 1See more

prometheus romanow-helm-charts 1.7.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
prom/prometheus:v2.52.05c435642ca4d
golang.org/x/net@v0.24.0
stdlib@go1.22.3
0.55.0
1.25.13

Open the chart page →

1,160
routehub-client-hubroutehub-helm1.0.02 of 3See more

routehub-client-hub routehub-helm 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
eqalpha/keydb:latest6537505c4235
stdlib@go1.16.7
1.25.13
timescale/timescaledb-ha:pg164f288c0a5213
golang.org/x/net@v0.26.0
stdlib@go1.18.1
0.55.0
1.25.13

Open the chart page →

12,916
rstudio-pmrstudioVerified publisher0.20.51 of 1See more

rstudio-pm rstudio 0.20.5

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
posit/package-manager:2026.09.0-ubuntu-24.04527493ef621b
stdlib@go1.26.5
1.25.13

Open the chart page →

32,684
mealiertomik-helm-chartsVerified publisher0.0.21 of 1See more

mealie rtomik-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.2.1322369a5b748
stdlib@go1.24.4
1.25.13

Open the chart page →

4,020
kyoorubxkubeVerified publisher0.1.101 of 9See more

kyoo rubxkube 0.1.10

1 of the 9 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/zoriya/kyoo_transcoder:4.7.12dadea51a91e
golang.org/x/net@v0.33.0
stdlib@go1.23.4
0.55.0
1.25.13

Open the chart page →

30,977
s3-encryption-gateways3-encryption-gatewayVerified publisher0.11.101 of 1See more

s3-encryption-gateway s3-encryption-gateway 0.11.10

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
cloud37io/s3-encryption-gateway:0.11.10f8ff2092b8af
stdlib@go1.26.5
1.25.13

Open the chart page →

265
rabbitmq-operatorsagikazarmarkVerified publisher0.0.31 of 1See more

rabbitmq-operator sagikazarmark 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
rabbitmqoperator/cluster-operator:1.8.3231e7ce0e905
golang.org/x/net@v0.0.0-20210510120150-4163338589ed
stdlib@go1.17
0.55.0
1.25.13

Open the chart page →

2,002
conference-appsalaboy1.0.04 of 7See more

conference-app salaboy 1.0.0

4 of the 7 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
salaboy/agenda-service-0967b907d9920c99918e2b91b91937b3digest-pinnedce9ce8293e4e
stdlib@go1.20.1
1.25.13
salaboy/c4p-service-a3dc0474cbfa348afcdf47a8eee70ba9digest-pinnedbb64bf14467d
stdlib@go1.20.1
1.25.13
salaboy/frontend-go-1739aa83b5e69d4ccb8a5615830ae66cdigest-pinned1ff7c90845e4
stdlib@go1.20.1
1.25.13
salaboy/notifications-service-0e27884e01429ab7e350cb5dff61b525digest-pinned799c35f9f306
stdlib@go1.20.1
1.25.13

Open the chart page →

11,094
ntfysarab97Verified publisher0.1.71 of 1See more

ntfy sarab97 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
binwiederhier/ntfy:v2.6.283e2e43d9956
golang.org/x/net@v0.11.0
stdlib@go1.20.5
0.55.0
1.25.13

Open the chart page →

1,773
uptime-kumasb-helm-charts0.4.01 of 1See more

uptime-kuma sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.24c364ef96aad
golang.org/x/net@v0.40.0
stdlib@go1.20.5
0.55.0
1.25.13

Open the chart page →

38,817
scaleway-csiscaleway-charts0.2.18 of 8See more

scaleway-csi scaleway-charts 0.2.1

8 of the 8 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
scaleway/scaleway-csi:v0.3.411135998e31c
golang.org/x/net@v0.42.0
stdlib@go1.24.12
0.55.0
1.25.13
registry.k8s.io/sig-storage/csi-attacher:v4.9.05aaefc24f315
golang.org/x/net@v0.40.0
stdlib@go1.24.2
0.55.0
1.25.13
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.14.05244abbe87e0
golang.org/x/net@v0.40.0
stdlib@go1.24.2
0.55.0
1.25.13
registry.k8s.io/sig-storage/csi-provisioner:v5.3.0bb057f866177
golang.org/x/net@v0.40.0
stdlib@go1.24.2
0.55.0
1.25.13
registry.k8s.io/sig-storage/csi-resizer:v1.14.05e7cbb63fd49
golang.org/x/net@v0.39.0
stdlib@go1.24.2
0.55.0
1.25.13
registry.k8s.io/sig-storage/csi-snapshotter:v8.3.0bc7be893ecc3
golang.org/x/net@v0.39.0
stdlib@go1.24.2
0.55.0
1.25.13
registry.k8s.io/sig-storage/livenessprobe:v2.16.088092d100909
golang.org/x/net@v0.40.0
stdlib@go1.24.2
0.55.0
1.25.13
registry.k8s.io/sig-storage/snapshot-controller:v8.3.012c2da094b02
golang.org/x/net@v0.39.0
stdlib@go1.24.2
0.55.0
1.25.13

Open the chart page →

3,860
teamcityscalified-teamcityVerified publisher2026.2.01 of 3See more

teamcity scalified-teamcity 2026.2.0

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
library/postgres:14816cf7d06ec3
stdlib@go1.24.6
1.25.13

Open the chart page →

1,270
sceptresceptreai0.1.122 of 5See more

sceptre sceptreai 0.1.12

2 of the 5 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
maponyacharles/sceptreai:postgresql-0.1.1258881351f309
stdlib@go1.25.12
1.25.13
maponyacharles/sceptreai:seaweedfs-0.1.127c8a525f08e9
stdlib@go1.25.12
1.25.13

Open the chart page →

4,543

Container images carrying it

5,366 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
netrisai/mongodb:4.4.4-debian-10-r095abfb776bb4
stdlib@go1.15.1
1.25.13
1
netrisai/netris-operator:v4.0.244f60aa0d898
golang.org/x/net@v0.0.0-20220225172249-27dd8689420f
stdlib@go1.18.10
0.55.0
1.25.13
1
netskopeprivateaccess/publisher_u22:latest93e2fd164a93
stdlib@go1.25.10
1.25.13
1
newrelic/newrelic-agent-control-cli:0.48.01a448492b55a
golang.org/x/net@v0.38.0
stdlib@go1.24.6
0.55.0
1.25.13
1
newrelic/newrelic-agent-control-cli:1.24.047520b65d6b2
stdlib@go1.26.5
1.25.13
1
nginx/nginx-ingress:1.11.1eb5b4fd73325
golang.org/x/net@v0.0.0-20201216054612-986b41b23924
stdlib@go1.15.11
0.55.0
1.25.13
1
ngosang/restic-exporter:2.1.2a8f9cfa30162
stdlib@go1.26.4
1.25.13
1
ngrok/ngrok-operator:0.22.0db8e6fecc52c
stdlib@go1.26.5
1.25.13
1
nineinfra/hdfs-operator:v0.7.0debb1e3410e2
golang.org/x/net@v0.17.0
stdlib@go1.21.3
0.55.0
1.25.13
1
nineinfra/kyuubi-operator:v0.7.08d8ed87ef77c
golang.org/x/net@v0.13.0
stdlib@go1.20.8
0.55.0
1.25.13
1
nineinfra/metastore-operator:v0.7.011259032fb04
golang.org/x/net@v0.13.0
stdlib@go1.20.8
0.55.0
1.25.13
1
nineinfra/nineinfra:v0.7.0d4aad414eccd
golang.org/x/net@v0.17.0
stdlib@go1.21.3
0.55.0
1.25.13
1
nineinfra/zookeeper-operator:v0.7.0af6eb2f37bfc
golang.org/x/net@v0.17.0
stdlib@go1.21.3
0.55.0
1.25.13
1
nmalhotr/webserver:v1.0.03419361fb0dd
stdlib@go1.13.10
1.25.13
1
nocodb/nocodb:0.258.06779a4ddedf2
golang.org/x/net@v0.19.0
stdlib@go1.21.10
0.55.0
1.25.13
1
nocodb/nocodb:0.100.2b0b91ec2a2dd
golang.org/x/net@v0.0.0-20220805013720-a33c5aa5df48
stdlib@go1.18.2
0.55.0
1.25.13
1
nocodb/nocodb:0.301.5d9516f0bf546
stdlib@go1.23.12
1.25.13
1
nocodb/nocodb:0.84.15f9b799933aa8
golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f
stdlib@go1.17.8
0.55.0
1.25.13
1
noooste/garage-ui:v0.12.10b68a9237da6
stdlib@go1.26.0
1.25.13
1
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
stdlib@go1.24.4
1.25.13
1
novosga/novosga:latest34b9acbe6e51
golang.org/x/net@v0.53.0
stdlib@go1.26.2
0.55.0
1.25.13
1
nsqio/nsq:v1.3.01a369c146af7
stdlib@go1.21.5
1.25.13
1
ntakashi/cole:1.2.3f7b68bee2a68
golang.org/x/net@v0.10.0
stdlib@go1.20.11
0.55.0
1.25.13
1
ntakashi/gitana:1.4.04171ec641120
golang.org/x/net@v0.0.0-20210929161516-d455829e376d
stdlib@go1.17.7
0.55.0
1.25.13
1
nutanix/cn-rwx-operator:1.1.00082e0cebd42
stdlib@go1.25.12
1.25.13
1
nvidia/dcgm-exporter:2.2.9-2.4.1-ubuntu20.0491b20b66d1cd
golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b
stdlib@go1.14.2
0.55.0
1.25.13
1
oamdev/cluster-gateway:v1.9.0-alpha.25591e29d66a2
golang.org/x/net@v0.7.0
stdlib@go1.19.8
0.55.0
1.25.13
1
oamdev/cluster-gateway:v1.4.0dc97164c4c1f
golang.org/x/net@v0.0.0-20211209124913-491a49abca63
stdlib@go1.17.10
0.55.0
1.25.13
1
oamdev/cluster-gateway-addon-manager:v1.4.01bcae00bd7b0
golang.org/x/net@v0.0.0-20211209124913-491a49abca63
stdlib@go1.17.10
0.55.0
1.25.13
1
oamdev/kube-webhook-certgen:v2.331e0892f3583
golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781
stdlib@go1.16.9
0.55.0
1.25.13
1
oamdev/terraform-controller:v0.8.070447f4d360a
golang.org/x/net@v0.0.0-20210614182718-04defd469f4e
stdlib@go1.16.4
0.55.0
1.25.13
1
oamdev/vector-controller:v0.2.39dd8be44ffc9
golang.org/x/net@v0.0.0-20210825183410-e898025ed96a
stdlib@go1.17.13
0.55.0
1.25.13
1
oamdev/vela-core:v1.11.095fa412c934e
golang.org/x/net@v0.42.0
stdlib@go1.23.8
0.55.0
1.25.13
1
oamdev/vela-prism:v1.6.06db6a937647d
golang.org/x/net@v0.0.0-20220225172249-27dd8689420f
stdlib@go1.19.3
0.55.0
1.25.13
1
obolnetwork/charon-dkg-sidecar:maine263be0a7440
golang.org/x/net@v0.44.0
stdlib@go1.25.3
0.55.0
1.25.13
1
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
golang.org/x/net@v0.21.0
stdlib@go1.22.5
0.55.0
1.25.13
1
ofekmeister/csi-gcs:v0.9.030d70fa9211b
golang.org/x/net@v0.0.0-20220513224357-95641704303c
stdlib@go1.18.2
0.55.0
1.25.13
1
offchainlabs/nitro-node:v3.7.6-c0fe95e9f779fa84b7b
golang.org/x/net@v0.38.0
stdlib@go1.24.5
0.55.0
1.25.13
1
offchainlabs/nitro-node:v3.1.0-7d1d84ce95865866129
golang.org/x/net@v0.21.0
stdlib@go1.21.10
0.55.0
1.25.13
1
okgolove/asprom:1.10.1974d2e5eb150
stdlib@go1.14.11
1.25.13
1
okteto/civo-webhook:0.5.357cd51176538
golang.org/x/net@v0.15.0
stdlib@go1.21.3
0.55.0
1.25.13
1
oliver006/redis_exporter:v1.11.104d958d209ab
stdlib@go1.15
1.25.13
1
oliver006/redis_exporter:v1.67.0120f7ec77293
stdlib@go1.23.4
1.25.13
1
oliver006/redis_exporter:v1.14.0d55e056987af
stdlib@go1.15.6
1.25.13
1
oliver006/redis_exporter:v1.66.0d98e6db8094f
stdlib@go1.23.2
1.25.13
1
oliver006/redis_exporter:v1.82.0-alpineda9e89ee4e75
stdlib@go1.26.1
1.25.13
1
olliai/exposecontroller:1.0.5a470d96525e4
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
stdlib@go1.16.3
0.55.0
1.25.13
1
olliai/k8s-replicator:1.3.05716f2a8bd4c
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
stdlib@go1.17.2
0.55.0
1.25.13
1
ondrejsika/counter:latestd95eaeee2172
golang.org/x/net@v0.46.0
stdlib@go1.26.2
0.55.0
1.25.13
1
onkar17/grafana:latestaef3ebd6e24e
golang.org/x/net@v0.0.0-20210119194325-5f4716e94777
stdlib@go1.16.1
0.55.0
1.25.13
1

syft 1.42.1 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.