StackRadar

CVE-2026-39821

High

Advisory

Published 22 May 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.2
base score, highest
EPSS
0.007
51st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
4,528
of 17,803 indexed, latest versions
Container images
5,282
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: git-lfs security update

Carried by container images the latest versions of 4,528 of 17,803 indexed charts deploy, on 5,282 images.

Affected packageAffected versionsFixed inImages
git-lfsrpm2.13.3-3.el8_60:3.4.1-11.el8_101
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+190 more1.25.135,243
golang.org/x/netgolangv0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+220 more0.55.03,683
OSV records
RHSA-2026:30853GO-2026-5026

Charts affected

4,528 by stars
ChartLatestAffected imagesRadar Score
mssqlmssqlVerified publisher1.10.31 of 1See more

mssql mssql 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
registry.gitlab.com/xrow-public/helm-mssql/mssql:1.10.3f923d842bc47
stdlib@go1.23.1
1.25.13

Open the chart page →

642
opa-kube-mgmtopa-kube-mgmtVerified publisher11.0.122 of 2See more

opa-kube-mgmt opa-kube-mgmt 11.0.12

2 of the 2 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
openpolicyagent/kube-mgmt:11.0.123a8b1bacbcd8
stdlib@go1.25.0
1.25.13
openpolicyagent/opa:1.19.0852359995443
stdlib@go1.26.5
1.25.13

Open the chart page →

622
redis-operatorot-container-kit0.26.11 of 1See more

redis-operator ot-container-kit 0.26.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
quay.io/opstree/redis-operator:v0.26.01c6818e5e505
stdlib@go1.25.12
1.25.13

Open the chart page →

137
outlineoutline0.0.91 of 4See more

outline outline 0.0.9

1 of the 4 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
outlinewiki/outline:0.69.1d060dcd8f9aa
stdlib@go1.19.4
1.25.13

Open the chart page →

4,444
spirespiffeVerified publisher0.30.24 of 10See more

spire spiffe 0.30.2

4 of the 10 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/spiffe/spiffe-csi-driver:0.2.79dfe4f0caff0
golang.org/x/net@v0.34.0
stdlib@go1.24.0
0.55.0
1.25.13
ghcr.io/spiffe/spiffe-helper:0.11.01c92e5998ad3
golang.org/x/net@v0.42.0
stdlib@go1.25.3
0.55.0
1.25.13
ghcr.io/spiffe/spire-controller-manager:0.7.0d7b9e710f542
stdlib@go1.26.5
1.25.13
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.15.011f199f6bec4
golang.org/x/net@v0.40.0
stdlib@go1.24.6
0.55.0
1.25.13

Open the chart page →

1,688
altinity-clickhouse-operatoraltinity-clickhouse-operator0.27.32 of 3See more

altinity-clickhouse-operator altinity-clickhouse-operator 0.27.3

2 of the 3 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.27.30520bfb8015d
stdlib@go1.26.5
1.25.13
altinity/metrics-exporter:0.27.31e7c1d8167aa
stdlib@go1.26.5
1.25.13

Open the chart page →

141
bytebasebytebase1.1.51 of 1See more

bytebase bytebase 1.1.5

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
bytebase/bytebase:latest9fcde38c0d5f
stdlib@go1.26.5
1.25.13

Open the chart page →

459
cert-manager-csi-drivercert-managerOfficialVerified publisher0.16.03 of 3See more

cert-manager-csi-driver cert-manager 0.16.0

3 of the 3 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-csi-driver:v0.16.09d13db6dc80e
stdlib@go1.26.5
1.25.13
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.17.0f9de845b1701
golang.org/x/net@v0.54.0
stdlib@go1.26.3
0.55.0
1.25.13
registry.k8s.io/sig-storage/livenessprobe:v2.19.006da0d5b8908
golang.org/x/net@v0.54.0
stdlib@go1.26.3
0.55.0
1.25.13

Open the chart page →

507
ansible-semaphorecloudhippieVerified publisher15.2.101 of 1See more

ansible-semaphore cloudhippie 15.2.10

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
semaphoreui/semaphore:v2.19.1498ad9bc7a2a0
golang.org/x/net@v0.36.0
stdlib@go1.25.5
0.55.0
1.25.13

Open the chart page →

1,428
etcdcloudpirates-etcdVerified publisher0.8.81 of 1See more

etcd cloudpirates-etcd 0.8.8

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
gcr.io/etcd-development/etcd:v3.7.1a9983dd6d928
stdlib@go1.26.5
1.25.13

Open the chart page →

143
zookeepercloudpirates-zookeeperVerified publisher0.13.111 of 1See more

zookeeper cloudpirates-zookeeper 0.13.11

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
library/zookeeper:3.9.5cab8944a33a1
stdlib@go1.18.1
1.25.13

Open the chart page →

2,979
vertical-pod-autoscalercluster-autoscaler0.12.04 of 4See more

vertical-pod-autoscaler cluster-autoscaler 0.12.0

4 of the 4 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
registry.k8s.io/autoscaling/vpa-admission-controller:1.7.1be29624f7f12
stdlib@go1.26.5
1.25.13
registry.k8s.io/autoscaling/vpa-recommender:1.7.189cea705535f
stdlib@go1.26.5
1.25.13
registry.k8s.io/autoscaling/vpa-updater:1.7.1feb42a526970
stdlib@go1.26.5
1.25.13
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20231011-8b53cabe0a7943503b45d
golang.org/x/net@v0.16.0
stdlib@go1.21.3
0.55.0
1.25.13

Open the chart page →

1,062
codefreshcodefresh-onpremOfficialVerified publisher2.12.145 of 42See more

codefresh codefresh-onprem 2.12.14

5 of the 42 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
bitnamilegacy/consul:1.21.4-debian-12-r133ae872fc99d
golang.org/x/net@v0.43.0
stdlib@go1.25.0
0.55.0
1.25.13
bitnamilegacy/mongodb:7.0.14-debian-12-r321e8f8baa432
golang.org/x/net@v0.27.0
stdlib@go1.21.12
0.55.0
1.25.13
bitnamilegacy/nats:2.11.8-debian-12-r0fa0cfba6034a
stdlib@go1.24.6
1.25.13
quay.io/codefresh/dind:3.0.250885ab519dac
golang.org/x/net@v0.43.0
stdlib@go1.26.5
0.55.0
1.25.13
quay.io/codefresh/redis:7.4.3-debian-12-r0935f97598255
stdlib@go1.23.8
1.25.13

Open the chart page →

15,524
couchbase-operatorcouchbaseVerified publisher2.93.02 of 2See more

couchbase-operator couchbase 2.93.0

2 of the 2 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
couchbase/admission-controller:2.9.3bf2d2e87e45f
golang.org/x/net@v0.43.0
stdlib@go1.26.5
0.55.0
1.25.13
couchbase/operator:2.9.369a385b49e1f
golang.org/x/net@v0.43.0
stdlib@go1.26.5
0.55.0
1.25.13

Open the chart page →

754
aws-ebs-csi-driverdeliveryheroVerified publisher2.17.46 of 6See more

aws-ebs-csi-driver deliveryhero 2.17.4

6 of the 6 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.16.11564359e1e0e
golang.org/x/net@v0.4.0
stdlib@go1.19.6
0.55.0
1.25.13
public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.1.0-eks-1-25-latest701eea03388c
golang.org/x/net@v0.4.0
stdlib@go1.19.5
0.55.0
1.25.13
public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v3.4.0-eks-1-25-latest460ee1a59fea
golang.org/x/net@v0.4.0
stdlib@go1.19.7
0.55.0
1.25.13
public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.7.0-eks-1-25-lateste711da25e7a0
golang.org/x/net@v0.4.0
stdlib@go1.19.8
0.55.0
1.25.13
public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.9.0-eks-1-25-latest8a305e162caa
golang.org/x/net@v0.7.0
stdlib@go1.19.8
0.55.0
1.25.13
public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.7.0-eks-1-25-latestf4345e67df8f
golang.org/x/net@v0.7.0
stdlib@go1.19.8
0.55.0
1.25.13

Open the chart page →

6,527
loki-simple-scalablegrafana1.8.112 of 3See more

loki-simple-scalable grafana 1.8.11

2 of the 3 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
grafana/agent-operator:v0.25.1a136c6208aa3
golang.org/x/net@v0.0.0-20220225172249-27dd8689420f
stdlib@go1.18
0.55.0
1.25.13
grafana/loki:2.6.11ee60f980950
golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd
stdlib@go1.17.9
0.55.0
1.25.13

Open the chart page →

6,485
memcachedkubelauncherVerified publisher0.1.321 of 1See more

memcached kubelauncher 0.1.32

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/memcacheddigest-pinnedb599ca6b3ff3
stdlib@go1.26.5
1.25.13

Open the chart page →

654
mysqlkubelauncherVerified publisher0.4.41 of 1See more

mysql kubelauncher 0.4.4

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/mysqldigest-pinnede9609bd50416
stdlib@go1.26.5
1.25.13

Open the chart page →

997
postgresqlkubelauncherVerified publisher0.4.31 of 1See more

postgresql kubelauncher 0.4.3

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/postgresqldigest-pinned1a27e11e5925
stdlib@go1.26.5
1.25.13

Open the chart page →

1,174
kube-prometheus-stackkube-prometheus-stack-oci91.4.12 of 6See more

kube-prometheus-stack kube-prometheus-stack-oci 91.4.1

2 of the 6 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
grafana/grafana:13.2.2-distroless69a5d2d957ca
golang.org/x/net@v0.51.0
stdlib@go1.26.4
0.55.0
1.25.13
quay.io/prometheus/node-exporter:v1.12.1-distroless8c9bac11973b
stdlib@go1.26.5
1.25.13

Open the chart page →

682
kubernetes-replicatorkubernetes-replicator2.12.41 of 1See more

kubernetes-replicator kubernetes-replicator 2.12.4

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
quay.io/mittwald/kubernetes-replicator:v2.12.45dc9fc5ff59a
golang.org/x/net@v0.38.0
stdlib@go1.24.13
0.55.0
1.25.13

Open the chart page →

273
lakefslakefsVerified publisher1.12.301 of 1See more

lakefs lakefs 1.12.30

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
treeverse/lakefs:1.86.0fb7a0d90f77e
stdlib@go1.26.5
1.25.13

Open the chart page →

405
adguard-homerm3lVerified publisher0.24.11 of 2See more

adguard-home rm3l 0.24.1

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
adguard/adguardhome:v0.107.513a143e6c071c
golang.org/x/net@v0.25.0
stdlib@go1.22.4
0.55.0
1.25.13

Open the chart page →

1,149
spegelspegelVerified publisher0.7.41 of 1See more

spegel spegel 0.7.4

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/spegel-org/spegeldigest-pinned26c60b05e08a
stdlib@go1.26.5
1.25.13

Open the chart page →

188
supabasetokens-studioVerified publisher1.0.03 of 14See more

supabase tokens-studio 1.0.0

3 of the 14 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
darthsim/imgproxy:v3.26476cb08c816a
golang.org/x/net@v0.30.0
stdlib@go1.23.2
0.55.0
1.25.13
library/postgres:15-alpinefe0737ba566a
stdlib@go1.24.6
1.25.13
supabase/gotrue:v2.163.0ba4ddc594b0b
golang.org/x/net@v0.23.0
stdlib@go1.22.3
0.55.0
1.25.13

Open the chart page →

23,508
prometheus-operatorarldkaVerified publisher13.0.12 of 2See more

prometheus-operator arldka 13.0.1

2 of the 2 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-operator:v0.73.204f2b98d71ef
golang.org/x/net@v0.22.0
stdlib@go1.22.2
0.55.0
1.25.13
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20221220-controller-v1.5.1-58-g787ea74b64d99688e5573
golang.org/x/net@v0.1.0
stdlib@go1.19.4
0.55.0
1.25.13

Open the chart page →

2,108
renterdartur9010Verified publisher1.4.42 of 2See more

renterd artur9010 1.4.4

2 of the 2 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
artur9010/wait-for:v1.0.06b4de3ce8b0e
stdlib@go1.22.4
1.25.13
ghcr.io/siafoundation/renterd:2.9.0e0334f124863
stdlib@go1.26.0
1.25.13

Open the chart page →

8,625
nsqbeeinventor1.3.01 of 1See more

nsq beeinventor 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
nsqio/nsq:v1.3.01a369c146af7
stdlib@go1.21.5
1.25.13

Open the chart page →

871
frigateblakeblackshear7.8.01 of 1See more

frigate blakeblackshear 7.8.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/blakeblackshear/frigate:0.14.122e3d0b486df
golang.org/x/net@v0.8.0
stdlib@go1.17.1
0.55.0
1.25.13

Open the chart page →

3,005
budibasebudibase0.0.0-master1 of 7See more

budibase budibase 0.0.0-master

1 of the 7 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
minio/minio:latest14cea493d9a3
golang.org/x/net@v0.39.0
stdlib@go1.24.6
0.55.0
1.25.13

Open the chart page →

11,231
kube-prometheuschoerodon9.3.14 of 7See more

kube-prometheus choerodon 9.3.1

4 of the 7 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
grafana/grafana:7.0.3d72946c8e5d5
golang.org/x/net@v0.0.0-20200202094626-16171245cfb2
stdlib@go1.14.3
0.55.0
1.25.13
jettech/kube-webhook-certgen:v1.2.1c42098c8d855
golang.org/x/net@v0.0.0-20190108225652-1e06a53dbb7e
stdlib@go1.13.11
0.55.0
1.25.13
squareup/ghostunnel:v1.5.270f4cf270425
golang.org/x/net@v0.0.0-20191003171128-d98b1b443823
stdlib@go1.13.4
0.55.0
1.25.13
quay.io/prometheus/node-exporter:v1.0.08a3a33cad0bd
golang.org/x/net@v0.0.0-20200513185701-a91f0712d120
stdlib@go1.14.3
0.55.0
1.25.13

Open the chart page →

12,252
cloudflare-ddnscloudflareVerified publisher1.0.31 of 1See more

cloudflare-ddns cloudflare 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/aureum-cloud/cloudflare-ddns:latestaeb75d1605f4
stdlib@go1.23.12
1.25.13

Open the chart page →

307
timescaledbcloudpirates-timescaledbVerified publisher0.13.101 of 1See more

timescaledb cloudpirates-timescaledb 0.13.10

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
timescale/timescaledb:2.30.0-pg173113d12b7839
stdlib@go1.26.2
1.25.13

Open the chart page →

623
csi-secrets-store-provider-azurecsi-secrets-store-provider-azureVerified publisher1.8.24 of 5See more

csi-secrets-store-provider-azure csi-secrets-store-provider-azure 1.8.2

4 of the 5 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-node-driver-registrar:v2.14.06cb172e3de7e
golang.org/x/net@v0.40.0
stdlib@go1.26.5
0.55.0
1.25.13
mcr.microsoft.com/oss/v2/kubernetes-csi/livenessprobe:v2.15.059b9d0348428
golang.org/x/net@v0.39.0
stdlib@go1.25.7
0.55.0
1.25.13
mcr.microsoft.com/oss/v2/kubernetes-csi/secrets-store/driver:v1.5.65f91243cfd60
golang.org/x/net@v0.47.0
stdlib@go1.26.3
0.55.0
1.25.13
mcr.microsoft.com/oss/v2/kubernetes-csi/secrets-store/driver-crds:v1.5.6cb0112636dc4
golang.org/x/net@v0.49.0
stdlib@go1.26.3
0.55.0
1.25.13

Open the chart page →

2,327
minifluxgabe565Verified publisher0.9.21 of 2See more

miniflux gabe565 0.9.2

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/miniflux/miniflux:2.2.5bacc9b78ec61
golang.org/x/net@v0.34.0
stdlib@go1.23.5
0.55.0
1.25.13

Open the chart page →

1,392
cubestoregadsme1.2.01 of 3See more

cubestore gadsme 1.2.0

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
prom/statsd-exporter:v0.24.061d866e93b56
golang.org/x/net@v0.10.0
stdlib@go1.19.9
0.55.0
1.25.13

Open the chart page →

3,074
waypointhashicorpVerified publisher0.1.211 of 2See more

waypoint hashicorp 0.1.21

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
hashicorp/waypoint:0.11.397d521a27498
golang.org/x/net@v0.1.0
stdlib@go1.19.4
0.55.0
1.25.13

Open the chart page →

4,177
hivemq-operatorhivemqOfficialVerified publisher0.11.621 of 2See more

hivemq-operator hivemq 0.11.62

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.1.164d8c73dca98
golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023
stdlib@go1.16.9
0.55.0
1.25.13

Open the chart page →

7,973
jaeger-all-in-onejaeger-all-in-oneVerified publisher0.1.121 of 1See more

jaeger-all-in-one jaeger-all-in-one 0.1.12

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:1.55f6b5d09073f1
golang.org/x/net@v0.21.0
stdlib@go1.22.0
0.55.0
1.25.13

Open the chart page →

1,230
cassandrakubelauncherVerified publisher0.1.271 of 1See more

cassandra kubelauncher 0.1.27

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/cassandradigest-pinnedb66aba320083
stdlib@go1.26.5
1.25.13

Open the chart page →

1,556
etcdkubelauncherVerified publisher0.4.31 of 1See more

etcd kubelauncher 0.4.3

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/etcddigest-pinned8ab954711fb9
stdlib@go1.26.5
1.25.13

Open the chart page →

839
kafkakubelauncherVerified publisher0.1.261 of 1See more

kafka kubelauncher 0.1.26

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/kafkadigest-pinned43e1085cd0a8
stdlib@go1.26.5
1.25.13

Open the chart page →

1,452
keycloakkubelauncherVerified publisher0.4.41 of 1See more

keycloak kubelauncher 0.4.4

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/keycloakdigest-pinnedafe3bd73d7cf
stdlib@go1.26.5
1.25.13

Open the chart page →

1,348
kubectlkubelauncherVerified publisher0.2.111 of 1See more

kubectl kubelauncher 0.2.11

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/kubectldigest-pinned7280594a2f18
golang.org/x/net@v0.49.0
stdlib@go1.26.5
0.55.0
1.25.13

Open the chart page →

1,277
mariadbkubelauncherVerified publisher0.5.71 of 1See more

mariadb kubelauncher 0.5.7

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/mariadbdigest-pinnede25056a6ec52
stdlib@go1.26.5
1.25.13

Open the chart page →

1,121
mongodbkubelauncherVerified publisher0.4.51 of 1See more

mongodb kubelauncher 0.4.5

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/mongodbdigest-pinned9bc37ed78a8b
golang.org/x/net@v0.47.0
stdlib@go1.25.9
0.55.0
1.25.13

Open the chart page →

1,400
rabbitmqkubelauncherVerified publisher0.2.111 of 1See more

rabbitmq kubelauncher 0.2.11

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/rabbitmqdigest-pinnedff5a36a457f1
stdlib@go1.22.2
1.25.13

Open the chart page →

1,138
rediskubelauncherVerified publisher0.5.11 of 1See more

redis kubelauncher 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/redisdigest-pinnedbcd8e9a6224f
stdlib@go1.26.5
1.25.13

Open the chart page →

828
zookeeperkubelauncherVerified publisher0.2.111 of 1See more

zookeeper kubelauncher 0.2.11

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/zookeeperdigest-pinned7826e9caa461
stdlib@go1.26.5
1.25.13

Open the chart page →

1,081
minecraft-proxyminecraft-server-chartsVerified publisher3.10.01 of 1See more

minecraft-proxy minecraft-server-charts 3.10.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
itzg/bungeecord:latest1c59f9631f3b
stdlib@go1.26.5
1.25.13

Open the chart page →

3,175

Container images carrying it

5,282 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
otel/opentelemetry-collector:0.59.0ee9da0b08d83
golang.org/x/net@v0.0.0-20220809184613-07c6da5e1ced
stdlib@go1.18.5
0.55.0
1.25.13
1
otel/opentelemetry-collector-contrib:0.114.037fa87091cfa
golang.org/x/net@v0.31.0
stdlib@go1.23.3
0.55.0
1.25.13
1
otel/opentelemetry-collector-contrib:0.143.03bc07732530c
golang.org/x/net@v0.48.0
stdlib@go1.25.5
0.55.0
1.25.13
1
otel/opentelemetry-collector-contrib:0.113.05ac3e0ba2b0b
golang.org/x/net@v0.30.0
stdlib@go1.23.2
0.55.0
1.25.13
1
otel/opentelemetry-collector-contrib:0.83.071fcef33ae71
golang.org/x/net@v0.14.0
stdlib@go1.20.7
0.55.0
1.25.13
1
otel/opentelemetry-collector-contrib:0.108.0923eb1cfae32
golang.org/x/net@v0.28.0
stdlib@go1.23.0
0.55.0
1.25.13
1
otel/opentelemetry-collector-contrib:0.89.0995f17004231
golang.org/x/net@v0.18.0
stdlib@go1.21.4
0.55.0
1.25.13
1
otel/opentelemetry-collector-contrib:0.145.0a7343f018690
golang.org/x/net@v0.49.0
stdlib@go1.25.7
0.55.0
1.25.13
1
otel/opentelemetry-collector-contrib:0.154.0b3079f45e19b
stdlib@go1.26.4
1.25.13
1
otel/opentelemetry-collector-contrib:0.46.0ba173aa85f3f
golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd
stdlib@go1.17.7
0.55.0
1.25.13
1
otel/opentelemetry-collector-contrib:0.81.0c6671841470b
golang.org/x/net@v0.11.0
stdlib@go1.20.5
0.55.0
1.25.13
1
otel/opentelemetry-collector-contrib:0.63.1dfb3a55ea8c9
golang.org/x/net@v0.1.0
stdlib@go1.19.2
0.55.0
1.25.13
1
otel/opentelemetry-collector-contrib:0.157.0f2f01157055a
stdlib@go1.26.5
1.25.13
1
otel/opentelemetry-collector-contrib:0.139.0faf125d656fa
golang.org/x/net@v0.46.0
stdlib@go1.25.3
0.55.0
1.25.13
1
otel/opentelemetry-collector-k8s:0.120.01e45d9483faa
golang.org/x/net@v0.35.0
stdlib@go1.24.0
0.55.0
1.25.13
1
otel/opentelemetry-ebpf-k8s-watcher:v0.10.263a0d1dd2cac
golang.org/x/net@v0.7.0
stdlib@go1.20
0.55.0
1.25.13
1
outcoldsolutions/collectorforopenshift:26.04.45000a5f27bbb
stdlib@go1.26.4
1.25.13
1
outlinewiki/outline:0.82.0494dfb9249a6
stdlib@go1.20.12
1.25.13
1
ovhplatform/what-is-my-pod:1.0.16d4d455e9aba
stdlib@go1.16.14
1.25.13
1
owncloud/ocis:7.1.388e7c854517d
golang.org/x/net@v0.33.0
stdlib@go1.22.12
0.55.0
1.25.13
1
owncloud/ocis:8.0.1b38fd8fdd58f
golang.org/x/net@v0.48.0
stdlib@go1.25.7
0.55.0
1.25.13
1
owncloud/ocis:1.7.0d2efcae92c84
golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781
stdlib@go1.16.5
0.55.0
1.25.13
1
owncloud/server:10.15.051d9b74fc2a8
golang.org/x/net@v0.26.0
stdlib@go1.22.4
0.55.0
1.25.13
1
owncloud/server:10.16.274c53d341076
golang.org/x/net@v0.52.0
stdlib@go1.26.3
0.55.0
1.25.13
1
owncloud/server:10.16.3b3f9efdcd7f7
stdlib@go1.26.5
1.25.13
1
oxynozeta/kubernetes-tagger:1.3.0a153c386f5af
golang.org/x/net@v0.0.0-20211209124913-491a49abca63
stdlib@go1.17
0.55.0
1.25.13
1
oxynozeta/prometheus-cachethq:1.1.131f11669d597
stdlib@go1.15.1
1.25.13
1
pactfoundation/pact-broker:2.79.1.112861b0bd4d9
stdlib@go1.14.4
1.25.13
1
pactfoundation/pact-broker:2.101.0.0a3021fc42834
stdlib@go1.14.4
1.25.13
1
pannoi/kollektor:1.0.59559617788fc
golang.org/x/net@v0.17.0
stdlib@go1.20.14
0.55.0
1.25.13
1
passbolt/passbolt:3.9.0-2-ce-non-rootec046e112d5c
stdlib@go1.14.4
1.25.13
1
penpotapp/backend:2.17.2770b55f6e51b
stdlib@go1.26.5
1.25.13
1
penpotapp/exporter:2.17.272a8061e8806
stdlib@go1.26.5
1.25.13
1
penpotapp/mcp:2.17.284f3f07ead11
stdlib@go1.26.5
1.25.13
1
percona/mongodb_exporter:0.53.00214e482b2cd
stdlib@go1.26.2
1.25.13
1
percona/percona-postgresql-operator:2.8.06cce2698d3f5
golang.org/x/net@v0.46.0
stdlib@go1.25.4
0.55.0
1.25.13
1
percona/percona-server-mongodb-operator:1.20.1d09453ce7886
golang.org/x/net@v0.38.0
stdlib@go1.24.3
0.55.0
1.25.13
1
percona/percona-server-mongodb-operator:1.23.0feaff989e253
stdlib@go1.26.5
1.25.13
1
percona/percona-server-mysql-operator:1.2.028bfc38c1d4b
stdlib@go1.26.4
1.25.13
1
percona/percona-xtradb-cluster:8.0.32-24.21f978ab8912e
stdlib@go1.19.9
1.25.13
1
percona/percona-xtradb-cluster-operator:1.14.03232ae01d0ff
golang.org/x/net@v0.19.0
stdlib@go1.21.7
0.55.0
1.25.13
1
percona/percona-xtradb-cluster-operator:1.20.0ac4d0995c71e
stdlib@go1.26.4
1.25.13
1
percona/pmm-server:3.9.1003f9c25f842
stdlib@go1.26.4
1.25.13
1
persesdev/perses:v0.54.0a0e34ddaf9d7
stdlib@go1.26.5
1.25.13
1
persesdev/perses-operator:v0.5.08f8d7b09caef
stdlib@go1.26.5
1.25.13
1
peterdavehello/tor-socks-proxy:latest0cc12d36d312
golang.org/x/net@v0.35.0
stdlib@go1.26.2
0.55.0
1.25.13
1
pgsharding/spqr-router:nightly-2.8.3-1839-f66048d84734940216d3
golang.org/x/net@v0.47.0
stdlib@go1.25.4
0.55.0
1.25.13
1
pgvector/pgvector:pg17cf134a767f47
stdlib@go1.24.6
1.25.13
1
philmtd/full-house:1.9.0d68a6bb8a2bf
stdlib@go1.26.3
1.25.13
1
phntom/chadbot:0.2.397c28e4178ad
golang.org/x/net@v0.11.0
stdlib@go1.21.5
0.55.0
1.25.13
1

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.