CVE-2026-39821

High

Advisory

Published 22 May 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 8.2; base score, highest
EPSS: 0.007; 51st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 4,528; of 17,803 indexed, latest versions
Container images: 5,282; deployed by those charts
Fix available: 3 of 3; affected packages

Red Hat Security Advisory: git-lfs security update

Carried by container images the latest versions of 4,528 of 17,803 indexed charts deploy, on 5,282 images.

Affected package	Affected versions	Fixed in	Images
git-lfsrpm	2.13.3-3.el8_6	0:3.4.1-11.el8_10	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+190 more	1.25.13	5,243
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+220 more	0.55.0	3,683

OSV records: RHSA-2026:30853 GO-2026-5026

Charts affected

4,528 by stars

Chart

Latest

Affected images

Radar Score

kubedashdevopstales

4.0.0

5 of 8 See more

kubedash devopstales 4.0.0

5 of the 8 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/postgres :18.3	a9abf4275f9e	stdlib@go1.24.6	1.25.13
oliver006/redis_exporter :v1.82.0-alpine	da9e89ee4e75	stdlib@go1.26.1	1.25.13
prom/statsd-exporter :v0.22.4	8be660470961	stdlib@go1.17.3	1.25.13
sosedoff/pgweb :latest	a5256d416e2e	golang.org/x/net@v0.47.0 stdlib@go1.24.6	0.55.0 1.25.13
quay.io/prometheuscommunity/postgres-exporter :v0.19.1	e96064f87622	golang.org/x/net@v0.48.0 stdlib@go1.25.7	0.55.0 1.25.13

Open the chart page →

9,362

permission-managerdevopstales

1.8.0

1 of 1 See more

permission-manager devopstales 1.8.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
quay.io/sighup/permission-manager :v1.7.1-rc1	f5e6a5dcee33	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.16.8	0.55.0 1.25.13

Open the chart page →

2,267

trivy-operatordevopstales

2.5.0

1 of 1 See more

trivy-operator devopstales 2.5.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
devopstales/trivy-operator :2.5	75136aa7a26e	golang.org/x/net@v0.4.0 stdlib@go1.18.10	0.55.0 1.25.13

Open the chart page →

5,608

dnsmasqdevplayer0

0.1.5

1 of 2 See more

dnsmasq devplayer0 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/devplayer0/kubelan :0.2.3	b776dae45d08	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.5	0.55.0 1.25.13

Open the chart page →

3,392

whoamidevplayer0

0.1.2

1 of 1 See more

whoami devplayer0 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
traefik/whoami :v1.6.1	2c52bb2c8480	stdlib@go1.15.6	1.25.13

Open the chart page →

1,216

calicodevtron

0.1.1

4 of 4 See more

calico devtron 0.1.1

4 of the 4 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
quay.io/devtron/calico-networking :kube-controllers-v3.19.1	2ff71ba65cd7	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.15.2	0.55.0 1.25.13
quay.io/devtron/calico-networking :cni-v3.19.1	51f294c56842	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.15.2	0.55.0 1.25.13
quay.io/devtron/calico-networking :node-v3.19.1	bc4aa22272ef	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.15.2	0.55.0 1.25.13
quay.io/devtron/calico-networking :pod2daemon-flexvol-v3.19.1	c1f36b6e18e0	stdlib@go1.15.2	1.25.13

Open the chart page →

10,096

clairdevtron

0.1.14

1 of 2 See more

clair devtron 0.1.14

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
quay.io/devtron/clair :4.3.6	75fb847ac045	golang.org/x/net@v0.0.0-20210805182204-aaa1db679c0d stdlib@go1.17.6	0.55.0 1.25.13

Open the chart page →

6,238

discord-alertmanagerdevtron-labs

0.10.0

1 of 1 See more

discord-alertmanager devtron-labs 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
quay.io/devtron/discord-alertmanager :ceceb475-65-352	03586419ca31	stdlib@go1.18.1	1.25.13

Open the chart page →

951

dex-serverdex-server

1.19.1

2 of 3 See more

dex-server dex-server 1.19.1

2 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
dexidp/dex :v2.39.1-distroless	43655afd1a8f	golang.org/x/net@v0.24.0 stdlib@go1.21.6	0.55.0 1.25.13
public.ecr.aws/cloudnatix/llmariner/database-creator :1.19.1	62375abc3c56	stdlib@go1.23.12	1.25.13

Open the chart page →

2,246

digispoof-interfacedigispoof-interface

1.0.0

1 of 3 See more

digispoof-interface digispoof-interface 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/digispoof-interface-php :latest	03aba499950f	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.55.0 1.25.13

Open the chart page →

7,789

matomodigitalist-open-cloud-matomo

12.0.20

1 of 3 See more

matomo digitalist-open-cloud-matomo 12.0.20

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
hipages/php-fpm_exporter :2.2.0	9b5be9d3d955	stdlib@go1.17.10	1.25.13

Open the chart page →

3,540

directusdirectus-io

2.1.0

3 of 3 See more

directus directus-io 2.1.0

3 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
bitnamilegacy/mysql :9.4.0-debian-12-r1	ec13e229247a	stdlib@go1.24.6	1.25.13
bitnamilegacy/redis :8.2.1-debian-12-r0	25bf63f3caf7	stdlib@go1.25.0	1.25.13
directus/directus :12.0.2	9c8470ea465c	stdlib@go1.23.12	1.25.13

Open the chart page →

7,645

alertmanager-ntfydjjudas21

0.1.2

1 of 1 See more

alertmanager-ntfy djjudas21 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/alexbakker/alertmanager-ntfy :1.0.1	2f4db8064595	golang.org/x/net@v0.41.0 stdlib@go1.24.4	0.55.0 1.25.13

Open the chart page →

641

dkim-managerdkim-manager

0.2.0

1 of 1 See more

dkim-manager dkim-manager 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/hsn723/dkim-manager :1.4.0	0312232b31a2	golang.org/x/net@v0.50.0 stdlib@go1.26.0	0.55.0 1.25.13

Open the chart page →

293

dnation-pingdnationcloud

0.1.9

4 of 5 See more

dnation-ping dnationcloud 0.1.9

4 of the 5 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
grafana/grafana :7.3.5	511bc20bfcd1	golang.org/x/net@v0.0.0-20201022231255-08b38378de70 stdlib@go1.15.5	0.55.0 1.25.13
jimmidyson/configmap-reload :v0.4.0	17d34fd73f9e	stdlib@go1.14.4	1.25.13
prom/blackbox-exporter :v0.18.0	1ffc3f109eb3	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9 stdlib@go1.15.2	0.55.0 1.25.13
prom/prometheus :v2.21.0	d43417c260e5	golang.org/x/net@v0.0.0-20200822124328-c89045814202 stdlib@go1.15.2	0.55.0 1.25.13

Open the chart page →

10,470

docker-in-dockerdocker-in-docker

0.0.3

1 of 2 See more

docker-in-docker docker-in-docker 0.0.3

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/docker :24.0.2-dind	1d148deae16a	golang.org/x/net@v0.8.0 stdlib@go1.20.4	0.55.0 1.25.13

Open the chart page →

2,595

docker-registrydocker-repository

0.1.0

1 of 1 See more

docker-registry docker-repository 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/registry :latest	1be55279f18a	golang.org/x/net@v0.52.0 stdlib@go1.25.9	0.55.0 1.25.13

Open the chart page →

658

dockyarddockyard

0.4.0

1 of 1 See more

dockyard dockyard 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/kgma74/dockyard :0.4.0	b40439329191	golang.org/x/net@v0.29.0 stdlib@go1.26.5	0.55.0 1.25.13

Open the chart page →

1,558

thermitedollarshaveclub

0.1.17

1 of 1 See more

thermite dollarshaveclub 0.1.17

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
dollarshaveclub/thermite :0.0.31	663cbf25fcfe	golang.org/x/net@v0.0.0-20210805182204-aaa1db679c0d stdlib@go1.17.1	0.55.0 1.25.13

Open the chart page →

2,739

domain-lockerdomain-locker

0.2.8

1 of 3 See more

domain-locker domain-locker 0.2.8

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/postgres :15-alpine	fe0737ba566a	stdlib@go1.24.6	1.25.13

Open the chart page →

1,886

dominodomino

0.1.11

1 of 3 See more

domino domino 0.1.11

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/postgres :13	4689940c6838	stdlib@go1.24.6	1.25.13

Open the chart page →

8,929

archerydouban

0.4.3

2 of 6 See more

archery douban 0.4.3

2 of the 6 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
hanchuanchuan/goinception :latest	b3c0dd26fb50	golang.org/x/net@v0.23.0 stdlib@go1.22.1	0.55.0 1.25.13
hhyo/archery :v1.9.1	1aa41843419e	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.6	0.55.0 1.25.13

Open the chart page →

5,861

karmadouban

1.9.2

1 of 1 See more

karma douban 1.9.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/prymitive/karma :v0.85	d06892218680	golang.org/x/net@v0.0.0-20210503060351-7fd8e65b6420 stdlib@go1.16.3	0.55.0 1.25.13

Open the chart page →

2,018

seafiledr300481

0.12.1

1 of 1 See more

seafile dr300481 0.12.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
seafileltd/seafile-mc :11.0.12	d0c66e4621bd	stdlib@go1.21.4	1.25.13

Open the chart page →

68,853

dragonfly-stackdragonfly

0.1.2

4 of 7 See more

dragonfly-stack dragonfly 0.1.2

4 of the 7 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
dragonflyoss/client :v0.1.82	edf3e921f4e0	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.55.0 1.25.13
dragonflyoss/manager :v2.1.49	c3ef7f10698d	golang.org/x/net@v0.19.0 stdlib@go1.21.1	0.55.0 1.25.13
dragonflyoss/scheduler :v2.1.49	523785c77787	golang.org/x/net@v0.19.0 stdlib@go1.21.1	0.55.0 1.25.13
ghcr.io/containerd/nydus-snapshotter :v0.9.0	56f8617363b4	golang.org/x/net@v0.8.0 stdlib@go1.18.10	0.55.0 1.25.13

Open the chart page →

18,901

nydus-snapshotterdragonfly

0.0.10

1 of 2 See more

nydus-snapshotter dragonfly 0.0.10

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/containerd/nydus-snapshotter :v0.9.0	56f8617363b4	golang.org/x/net@v0.8.0 stdlib@go1.18.10	0.55.0 1.25.13

Open the chart page →

3,669

rstudiodsri-helm-charts

0.1.28

1 of 1 See more

rstudio dsri-helm-charts 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/maastrichtu-ids/rstudio :latest	981aa4c109e1	stdlib@go1.20.12	1.25.13

Open the chart page →

64,698

dyff-operatordyff-operator

0.24.20

1 of 1 See more

dyff-operator dyff-operator 0.24.20

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
registry.gitlab.com/dyff/dyff-operator :0.24.20	e9ca51627601	golang.org/x/net@v0.44.0 stdlib@go1.24.13	0.55.0 1.25.13

Open the chart page →

273

gethdysnix

1.1.2

1 of 1 See more

geth dysnix 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ethereum/client-go :v1.14.8	886ec69b35b0	golang.org/x/net@v0.24.0 stdlib@go1.22.6	0.55.0 1.25.13

Open the chart page →

1,626

jenkinsedu

2.7.1

1 of 2 See more

jenkins edu 2.7.1

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
jenkins/jenkins :lts	c1e4c349365f	golang.org/x/net@v0.38.0 stdlib@go1.25.3	0.55.0 1.25.13

Open the chart page →

4,464

glpieftechcombr-glpi

2.12.1

1 of 5 See more

glpi eftechcombr-glpi 2.12.1

1 of the 5 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/mariadb :12.3.2	a02fe89cb597	stdlib@go1.24.6	1.25.13

Open the chart page →

4,603

egagenteginnovations

0.10.0

1 of 1 See more

egagent eginnovations 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
eginnovations/agent :7.5.4	e4dfe242fe9f	stdlib@go1.26.4	1.25.13

Open the chart page →

1,356

glideeinstack

0.0.2

1 of 1 See more

glide einstack 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/einstack/glide :0.0.1-alpine	ab3f7d0a1d50	golang.org/x/net@v0.19.0 stdlib@go1.21.6	0.55.0 1.25.13

Open the chart page →

1,335

elchi-discoveryelchi

1.0.0

1 of 1 See more

elchi-discovery elchi 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
jhonbrownn/elchi-discovery :latest	8f6551ecc98c	golang.org/x/net@v0.13.0 stdlib@go1.23.1	0.55.0 1.25.13

Open the chart page →

638

elchi-stackelchi

1.13.0

6 of 10 See more

elchi-stack elchi 1.13.0

6 of the 10 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
grafana/grafana :12.2.0	74144189b384	golang.org/x/net@v0.43.0 stdlib@go1.24.6	0.55.0 1.25.13
jhonbrownn/elchi-backend :v1.6.14-v0.14.0-envoy1.39.0	31aee9ba2c63	stdlib@go1.25.12	1.25.13
jhonbrownn/elchi-collector :v0.1.11	9fdd0724865e	stdlib@go1.26.4	1.25.13
library/mongo :6.0.12	646902910d6a	stdlib@go1.18.2	1.25.13
otel/opentelemetry-collector-contrib :0.89.0	995f17004231	golang.org/x/net@v0.18.0 stdlib@go1.21.4	0.55.0 1.25.13
victoriametrics/victoria-metrics :v1.93.5	77a9815d0640	golang.org/x/net@v0.15.0 stdlib@go1.21.1	0.55.0 1.25.13

Open the chart page →

15,753

navidromeemmas-charts

0.0.6

1 of 1 See more

navidrome emmas-charts 0.0.6

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
deluan/navidrome :0.50.0	2cf4442b0099	golang.org/x/net@v0.18.0 stdlib@go1.21.0	0.55.0 1.25.13

Open the chart page →

2,130

enbuildenbuild

0.0.50

3 of 6 See more

enbuild enbuild 0.0.50

3 of the 6 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-backend :1.0.31	c7afac3446d6	golang.org/x/net@v0.47.0 stdlib@go1.25.7	0.55.0 1.25.13
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer :1.0.31	0e3cd8c7776d	golang.org/x/net@v0.50.0 stdlib@go1.25.7	0.55.0 1.25.13
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/mongodb :4.4.5	cf72810d33f5	stdlib@go1.15.8	1.25.13

Open the chart page →

31,809

eoapieoapi

0.16.3

1 of 7 See more

eoapi eoapi 0.16.3

1 of the 7 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
alpine/kubectl :1.34.1	8413f8890d19	golang.org/x/net@v0.38.0 stdlib@go1.24.6	0.55.0 1.25.13

Open the chart page →

2,952

nexus-operatorepmdedp-dev

2.11.0-MDTU-DDM-SNAPSHOT.1

1 of 1 See more

nexus-operator epmdedp-dev 2.11.0-MDTU-DDM-SNAPSHOT.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
epamedp/nexus-operator :2.11.0-MDTU-DDM-SNAPSHOT.1	449a53804699	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.17.2	0.55.0 1.25.13

Open the chart page →

2,266

paraerudika

0.3.0

1 of 1 See more

para erudika 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
erudikaltd/para :latest_stable	235e0bc53da2	stdlib@go1.26.5	1.25.13

Open the chart page →

1,162

httpbingoestahn

0.1.1

1 of 1 See more

httpbingo estahn 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
mccutchen/go-httpbin :v2.2.2	5994403ef75b	stdlib@go1.16.2	1.25.13

Open the chart page →

1,359

beaconchain-explorerethereum-helm-charts

0.1.6

1 of 2 See more

beaconchain-explorer ethereum-helm-charts 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
gobitfly/eth2-beaconchain-explorer :latest	1d08a7986348	golang.org/x/net@v0.34.0 stdlib@go1.23.5	0.55.0 1.25.13

Open the chart page →

3,110

ethereumjsethereum-helm-charts

0.1.2

1 of 2 See more

ethereumjs ethereum-helm-charts 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ethpandaops/ethereumjs :master	fb84b718500f	stdlib@go1.23.12	1.25.13

Open the chart page →

1,590

genesis-generatorethereum-helm-charts

0.2.3

1 of 2 See more

genesis-generator ethereum-helm-charts 0.2.3

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
skylenet/ethereum-genesis-generator :latest	210353ce7c89	stdlib@go1.17.13	1.25.13

Open the chart page →

3,137

ipfs-clusterethereum-helm-charts

0.1.14

3 of 3 See more

ipfs-cluster ethereum-helm-charts 0.1.14

3 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ipfs/ipfs-cluster :latest	a83266c524f1	golang.org/x/net@v0.53.0 stdlib@go1.26.3	0.55.0 1.25.13
ipfs/kubo :latest	63f5502f7a01	stdlib@go1.19.8	1.25.13
lachlanevenson/k8s-kubectl :v1.25.4	af5cea3f2e40	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.3	0.55.0 1.25.13

Open the chart page →

4,787

iobrokereugen

0.2.6

1 of 1 See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/buanet/iobroker :v9.1.2	ca7dc7362968	stdlib@go1.19.8	1.25.13

Open the chart page →

11,559

evccevcc

1.0.47

1 of 1 See more

evcc evcc 1.0.47

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
evcc/evcc :0.300.8	ddf2a25afce5	golang.org/x/net@v0.49.0 stdlib@go1.25.6	0.55.0 1.25.13

Open the chart page →

1,192

event-exporterevent-exporter

0.1.17

1 of 1 See more

event-exporter event-exporter 0.1.17

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
kubestar/event-exporter :latest	656606941255	golang.org/x/net@v0.17.0 stdlib@go1.20.14	0.55.0 1.25.13

Open the chart page →

1,210

events-exporterevents-exporter

0.0.4

1 of 1 See more

events-exporter events-exporter 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/nabokihms/events_exporter :latest	68d44646e8b2	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.19.5	0.55.0 1.25.13

Open the chart page →

2,135

github-actions-runner-operatorevryfs-oss

2.8.1

1 of 1 See more

github-actions-runner-operator evryfs-oss 2.8.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
quay.io/evryfs/github-actions-runner-operator :v0.11.1	6b084e0bd082	golang.org/x/net@v0.12.0 stdlib@go1.21.1	0.55.0 1.25.13

Open the chart page →

1,236

Container images carrying it

5,282 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
otel/opentelemetry-collector :0.59.0	ee9da0b08d83	golang.org/x/net@v0.0.0-20220809184613-07c6da5e1ced stdlib@go1.18.5	0.55.0 1.25.13	1
otel/opentelemetry-collector-contrib :0.114.0	37fa87091cfa	golang.org/x/net@v0.31.0 stdlib@go1.23.3	0.55.0 1.25.13	1
otel/opentelemetry-collector-contrib :0.143.0	3bc07732530c	golang.org/x/net@v0.48.0 stdlib@go1.25.5	0.55.0 1.25.13	1
otel/opentelemetry-collector-contrib :0.113.0	5ac3e0ba2b0b	golang.org/x/net@v0.30.0 stdlib@go1.23.2	0.55.0 1.25.13	1
otel/opentelemetry-collector-contrib :0.83.0	71fcef33ae71	golang.org/x/net@v0.14.0 stdlib@go1.20.7	0.55.0 1.25.13	1
otel/opentelemetry-collector-contrib :0.108.0	923eb1cfae32	golang.org/x/net@v0.28.0 stdlib@go1.23.0	0.55.0 1.25.13	1
otel/opentelemetry-collector-contrib :0.89.0	995f17004231	golang.org/x/net@v0.18.0 stdlib@go1.21.4	0.55.0 1.25.13	1
otel/opentelemetry-collector-contrib :0.145.0	a7343f018690	golang.org/x/net@v0.49.0 stdlib@go1.25.7	0.55.0 1.25.13	1
otel/opentelemetry-collector-contrib :0.154.0	b3079f45e19b	stdlib@go1.26.4	1.25.13	1
otel/opentelemetry-collector-contrib :0.46.0	ba173aa85f3f	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.7	0.55.0 1.25.13	1
otel/opentelemetry-collector-contrib :0.81.0	c6671841470b	golang.org/x/net@v0.11.0 stdlib@go1.20.5	0.55.0 1.25.13	1
otel/opentelemetry-collector-contrib :0.63.1	dfb3a55ea8c9	golang.org/x/net@v0.1.0 stdlib@go1.19.2	0.55.0 1.25.13	1
otel/opentelemetry-collector-contrib :0.157.0	f2f01157055a	stdlib@go1.26.5	1.25.13	1
otel/opentelemetry-collector-contrib :0.139.0	faf125d656fa	golang.org/x/net@v0.46.0 stdlib@go1.25.3	0.55.0 1.25.13	1
otel/opentelemetry-collector-k8s :0.120.0	1e45d9483faa	golang.org/x/net@v0.35.0 stdlib@go1.24.0	0.55.0 1.25.13	1
otel/opentelemetry-ebpf-k8s-watcher :v0.10.2	63a0d1dd2cac	golang.org/x/net@v0.7.0 stdlib@go1.20	0.55.0 1.25.13	1
outcoldsolutions/collectorforopenshift :26.04.4	5000a5f27bbb	stdlib@go1.26.4	1.25.13	1
outlinewiki/outline :0.82.0	494dfb9249a6	stdlib@go1.20.12	1.25.13	1
ovhplatform/what-is-my-pod :1.0.1	6d4d455e9aba	stdlib@go1.16.14	1.25.13	1
owncloud/ocis :7.1.3	88e7c854517d	golang.org/x/net@v0.33.0 stdlib@go1.22.12	0.55.0 1.25.13	1
owncloud/ocis :8.0.1	b38fd8fdd58f	golang.org/x/net@v0.48.0 stdlib@go1.25.7	0.55.0 1.25.13	1
owncloud/ocis :1.7.0	d2efcae92c84	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.5	0.55.0 1.25.13	1
owncloud/server :10.15.0	51d9b74fc2a8	golang.org/x/net@v0.26.0 stdlib@go1.22.4	0.55.0 1.25.13	1
owncloud/server :10.16.2	74c53d341076	golang.org/x/net@v0.52.0 stdlib@go1.26.3	0.55.0 1.25.13	1
owncloud/server :10.16.3	b3f9efdcd7f7	stdlib@go1.26.5	1.25.13	1
oxynozeta/kubernetes-tagger :1.3.0	a153c386f5af	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17	0.55.0 1.25.13	1
oxynozeta/prometheus-cachethq :1.1.1	31f11669d597	stdlib@go1.15.1	1.25.13	1
pactfoundation/pact-broker :2.79.1.1	12861b0bd4d9	stdlib@go1.14.4	1.25.13	1
pactfoundation/pact-broker :2.101.0.0	a3021fc42834	stdlib@go1.14.4	1.25.13	1
pannoi/kollektor :1.0.5	9559617788fc	golang.org/x/net@v0.17.0 stdlib@go1.20.14	0.55.0 1.25.13	1
passbolt/passbolt :3.9.0-2-ce-non-root	ec046e112d5c	stdlib@go1.14.4	1.25.13	1
penpotapp/backend :2.17.2	770b55f6e51b	stdlib@go1.26.5	1.25.13	1
penpotapp/exporter :2.17.2	72a8061e8806	stdlib@go1.26.5	1.25.13	1
penpotapp/mcp :2.17.2	84f3f07ead11	stdlib@go1.26.5	1.25.13	1
percona/mongodb_exporter :0.53.0	0214e482b2cd	stdlib@go1.26.2	1.25.13	1
percona/percona-postgresql-operator :2.8.0	6cce2698d3f5	golang.org/x/net@v0.46.0 stdlib@go1.25.4	0.55.0 1.25.13	1
percona/percona-server-mongodb-operator :1.20.1	d09453ce7886	golang.org/x/net@v0.38.0 stdlib@go1.24.3	0.55.0 1.25.13	1
percona/percona-server-mongodb-operator :1.23.0	feaff989e253	stdlib@go1.26.5	1.25.13	1
percona/percona-server-mysql-operator :1.2.0	28bfc38c1d4b	stdlib@go1.26.4	1.25.13	1
percona/percona-xtradb-cluster :8.0.32-24.2	1f978ab8912e	stdlib@go1.19.9	1.25.13	1
percona/percona-xtradb-cluster-operator :1.14.0	3232ae01d0ff	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.55.0 1.25.13	1
percona/percona-xtradb-cluster-operator :1.20.0	ac4d0995c71e	stdlib@go1.26.4	1.25.13	1
percona/pmm-server :3.9.1	003f9c25f842	stdlib@go1.26.4	1.25.13	1
persesdev/perses :v0.54.0	a0e34ddaf9d7	stdlib@go1.26.5	1.25.13	1
persesdev/perses-operator :v0.5.0	8f8d7b09caef	stdlib@go1.26.5	1.25.13	1
peterdavehello/tor-socks-proxy :latest	0cc12d36d312	golang.org/x/net@v0.35.0 stdlib@go1.26.2	0.55.0 1.25.13	1
pgsharding/spqr-router :nightly-2.8.3-1839-f66048d8	4734940216d3	golang.org/x/net@v0.47.0 stdlib@go1.25.4	0.55.0 1.25.13	1
pgvector/pgvector :pg17	cf134a767f47	stdlib@go1.24.6	1.25.13	1
philmtd/full-house :1.9.0	d68a6bb8a2bf	stdlib@go1.26.3	1.25.13	1
phntom/chadbot :0.2.3	97c28e4178ad	golang.org/x/net@v0.11.0 stdlib@go1.21.5	0.55.0 1.25.13	1