StackRadar

CVE-2026-39821

High

Advisory

Published 22 May 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.2
base score, highest
EPSS
0.007
51st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
4,642
of 17,813 indexed, latest versions
Container images
5,366
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: git-lfs security update

Carried by container images the latest versions of 4,642 of 17,813 indexed charts deploy, on 5,366 images.

Affected packageAffected versionsFixed inImages
git-lfsrpm2.13.3-3.el8_60:3.4.1-11.el8_101
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+191 more1.25.135,324
golang.org/x/netgolangv0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+220 more0.55.03,744
OSV records
RHSA-2026:30853GO-2026-5026

Charts affected

4,642 by stars
ChartLatestAffected imagesRadar Score
multusstartechnicaVerified publisher0.1.21 of 1See more

multus startechnica 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/k8snetworkplumbingwg/multus-cni:stableec4e5dfe12b6
golang.org/x/net@v0.48.0
stdlib@go1.25.11
0.55.0
1.25.13

Open the chart page →

527
statpingstatping0.1.141 of 1See more

statping statping 0.1.14

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
statping/statping:v0.90.74e874da513a5c
golang.org/x/net@v0.0.0-20200904194848-62affa334b73
stdlib@go1.14.13
0.55.0
1.25.13

Open the chart page →

3,379
thanosstevehipwell-helm-charts-thanosVerified publisher1.24.11 of 1See more

thanos stevehipwell-helm-charts-thanos 1.24.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.42.4b567818fe608
stdlib@go1.26.5
1.25.13

Open the chart page →

212
stornxstornxVerified publisher1.1.19 of 9See more

stornx stornx 1.1.1

9 of the 9 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
alazidis/kube-netlag:1.1.00e8c84152201
golang.org/x/net@v0.33.0
stdlib@go1.24.13
0.55.0
1.25.13
alazidis/stornx:1.1.1602d4f7f090c
golang.org/x/net@v0.47.0
stdlib@go1.25.7
0.55.0
1.25.13
istio/pilot:1.29.1f8b0e412ac4a
golang.org/x/net@v0.48.0
stdlib@go1.25.8
0.55.0
1.25.13
quay.io/kiali/kiali:v2.23.07652b1285f50
golang.org/x/net@v0.49.0
stdlib@go1.25.0
0.55.0
1.25.13
quay.io/prometheus-operator/prometheus-config-reloader:v0.90.0e5aab3be6873
golang.org/x/net@v0.52.0
stdlib@go1.25.8
0.55.0
1.25.13
quay.io/prometheus/node-exporter:v1.10.2337ff1d356b6
golang.org/x/net@v0.44.0
stdlib@go1.25.3
0.55.0
1.25.13
quay.io/prometheus/prometheus:v3.10.07571a304e67f
golang.org/x/net@v0.49.0
stdlib@go1.26.0
0.55.0
1.25.13
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
golang.org/x/net@v0.48.0
stdlib@go1.25.5
0.55.0
1.25.13
registry.k8s.io/metrics-server/metrics-server:v0.8.089258156d0e9
golang.org/x/net@v0.40.0
stdlib@go1.24.4
0.55.0
1.25.13

Open the chart page →

11,854
consolestratosVerified publisher4.4.01 of 4See more

console stratos 4.4.0

1 of the 4 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
splatform/stratos-jetstream:4.4.0-bc65c315c886311c331b9
golang.org/x/net@v0.0.0-20200822124328-c89045814202
stdlib@go1.13.4
0.55.0
1.25.13

Open the chart page →

22,731
stunner-gateway-operatorstunner1.1.02 of 2See more

stunner-gateway-operator stunner 1.1.0

2 of the 2 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
l7mp/stunner-auth-server:1.1.02f8114477ba6
golang.org/x/net@v0.36.0
stdlib@go1.23.8
0.55.0
1.25.13
l7mp/stunner-gateway-operator:1.1.0c34f7c931491
golang.org/x/net@v0.36.0
stdlib@go1.23.8
0.55.0
1.25.13

Open the chart page →

1,300
hlf-k8ssubstraVerified publisher10.2.44 of 7See more

hlf-k8s substra 10.2.4

4 of the 7 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
hyperledger/fabric-ca:1.5.0f270dfeee91d
golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0
stdlib@go1.15.7
0.55.0
1.25.13
jwilder/dockerize:latestf94fb59fb4f6
golang.org/x/net@v0.47.0
stdlib@go1.25.5
0.55.0
1.25.13
ghcr.io/substra/fabric-peer:0.2.4f681e0343a31
golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110
stdlib@go1.18.10
0.55.0
1.25.13
ghcr.io/substra/fabric-tools:0.2.43491a0f31c4a
golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110
stdlib@go1.18.10
0.55.0
1.25.13

Open the chart page →

12,032
supabasesupabse0.8.04 of 11See more

supabase supabse 0.8.0

4 of the 11 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
darthsim/imgproxy:v3.30.13b709e4a0e5e
golang.org/x/net@v0.44.0
stdlib@go1.25.1
0.55.0
1.25.13
library/postgres:17-alpinef02121de6f74
stdlib@go1.24.6
1.25.13
supabase/gotrue:v2.189.0385184459f57
golang.org/x/net@v0.52.0
stdlib@go1.25.8
0.55.0
1.25.13
supabase/postgres:17.6.1.136f371b5f3f2ac
stdlib@go1.26.1
1.25.13

Open the chart page →

18,318
Grafanasurajwarbhe-grafana0.1.01 of 1See more

Grafana surajwarbhe-grafana 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
surajwarbhe/grafana:v185248611e9f1
golang.org/x/net@v0.0.0-20200202094626-16171245cfb2
stdlib@go1.14.3
0.55.0
1.25.13

Open the chart page →

2,605
switchboardswitchboardVerified publisher0.7.41 of 1See more

switchboard switchboard 0.7.4

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/borchero/switchboard:0.7.454a193b757da
golang.org/x/net@v0.51.0
stdlib@go1.26.1
0.55.0
1.25.13

Open the chart page →

872
synology-proxy-operatorsynology-proxy-operatorVerified publisher0.0.81 of 1See more

synology-proxy-operator synology-proxy-operator 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/phoeluga/synology-proxy-operator:0.0.8b26510b26b31
golang.org/x/net@v0.52.0
stdlib@go1.26.2
0.55.0
1.25.13

Open the chart page →

210
hello-appsysintelligentVerified publisher2.0.11 of 1See more

hello-app sysintelligent 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
sysintelligent/hello-app:2.0.177fb30df847d
golang.org/x/net@v0.19.0
stdlib@go1.19.3
0.55.0
1.25.13

Open the chart page →

1,881
system-upgrade-controllersystem-upgradeVerified publisher0.2.131 of 1See more

system-upgrade-controller system-upgrade 0.2.13

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
rancher/system-upgrade-controller:v0.20.1aaf4dbf64057
golang.org/x/net@v0.53.0
stdlib@go1.26.5
0.55.0
1.25.13

Open the chart page →

125
system-upgrade-controllersystem-upgrade-controllerVerified publisher1.12.01 of 1See more

system-upgrade-controller system-upgrade-controller 1.12.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
rancher/system-upgrade-controller:v0.20.1aaf4dbf64057
golang.org/x/net@v0.53.0
stdlib@go1.26.5
0.55.0
1.25.13

Open the chart page →

125
headscaleszpadel-chartsVerified publisher0.30.22 of 3See more

headscale szpadel-charts 0.30.2

2 of the 3 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/juanfont/headscale:0.29.18453e47ea6bf
stdlib@go1.26.4
1.25.13
ghcr.io/tale/headplane:0.6.39476cc5adb12
golang.org/x/net@v0.42.0
stdlib@go1.25.1
0.55.0
1.25.13

Open the chart page →

1,912
tekton-events-relaytekton-events-relayVerified publisher0.10.11 of 1See more

tekton-events-relay tekton-events-relay 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/fabioluciano/tekton-events-relay:0.10.184cb5a2b8b81
stdlib@go1.26.4
1.25.13

Open the chart page →

296
tenuretenureVerified publisher1.0.62 of 2See more

tenure tenure 1.0.6

2 of the 2 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
mongodb/mongodb-atlas-local:8e118f5c131c5
stdlib@go1.26.5
1.25.13
tenureai/tenure:v1.0.285f5b222df9a5
stdlib@go1.26.2
1.25.13

Open the chart page →

2,480
terraform-controllerterraform-controller0.0.201 of 1See more

terraform-controller terraform-controller 0.0.20

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
absaoss/terraform-controller:v0.0.20ad538a1285a0
golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7
stdlib@go1.14.8
0.55.0
1.25.13

Open the chart page →

3,539
jenkinstestchart0.1.91 of 2See more

jenkins testchart 0.1.9

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
golang.org/x/net@v0.7.0
stdlib@go1.20.6
0.55.0
1.25.13

Open the chart page →

9,166
jenkinstest-jenkins9.1.01 of 2See more

jenkins test-jenkins 9.1.0

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
golang.org/x/net@v0.7.0
stdlib@go1.20.6
0.55.0
1.25.13

Open the chart page →

9,166
base-clusterteuto-netVerified publisher12.4.01 of 1See more

base-cluster teuto-net 12.4.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
registry.k8s.io/kubectl:1.33.4261a9ed843eb
golang.org/x/net@v0.38.0
stdlib@go1.24.5
0.55.0
1.25.13

Open the chart page →

436
tocktock0.6.31 of 9See more

tock tock 0.6.3

1 of the 9 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:7.0.5-debian-11-r66fe59ed5d79f
golang.org/x/net@v0.19.0
stdlib@go1.20.12
0.55.0
1.25.13

Open the chart page →

13,743
goalerttokens-studioVerified publisher0.0.51 of 2See more

goalert tokens-studio 0.0.5

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
goalert/goalert:v0.32.008d57388b0cb
golang.org/x/net@v0.20.0
stdlib@go1.22.1
0.55.0
1.25.13

Open the chart page →

1,477
tor-snowflake-proxytor-snowflake-proxyVerified publisher1.2.01 of 1See more

tor-snowflake-proxy tor-snowflake-proxy 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
thetorproject/snowflake-proxy:v2.11.01ddc5069d354
golang.org/x/net@v0.35.0
stdlib@go1.23.7
0.55.0
1.25.13

Open the chart page →

740
spa-reloadertoucanVerified publisher0.1.01 of 1See more

spa-reloader toucan 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
toucansoftware/spa-reloader:latestc187b1fba501
golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7
stdlib@go1.13.15
0.55.0
1.25.13

Open the chart page →

2,246
traefik-hubtraefikOfficialVerified publisher4.2.01 of 1See more

traefik-hub traefik 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/traefik/traefik-hub:v2.11.0322f5f8cc105
golang.org/x/net@v0.17.0
stdlib@go1.21.8
0.55.0
1.25.13

Open the chart page →

3,192
starboard-operatortrivy-operator0.10.251 of 1See more

starboard-operator trivy-operator 0.10.25

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
aquasec/starboard-operator:0.15.38e0b1c7ddc843
golang.org/x/net@v0.41.0
stdlib@go1.26.3
0.55.0
1.25.13

Open the chart page →

320
atlantistrozz3.12.111 of 1See more

atlantis trozz 3.12.11

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
runatlantis/atlantis:v0.16.145fbaf7e207c
golang.org/x/net@v0.0.0-20191027093000-83d349e8ac1a
stdlib@go1.14.7
0.55.0
1.25.13

Open the chart page →

5,288
guardrails-agent-kubernetesturbotVerified publisher0.3.01 of 1See more

guardrails-agent-kubernetes turbot 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/turbot/guardrails-agent-kubernetes:0.3.09d01bf9c9224
golang.org/x/net@v0.26.0
stdlib@go1.22.8
0.55.0
1.25.13

Open the chart page →

4,104
tyk-operatortyk-helm1.4.21 of 1See more

tyk-operator tyk-helm 1.4.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
tykio/tyk-operator:v1.4.2e13d37f298b7
stdlib@go1.25.12
1.25.13

Open the chart page →

148
boundaryundergridVerified publisher0.1.02 of 3See more

boundary undergrid 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
groundnuty/k8s-wait-for:v1.684edcf796267
stdlib@go1.18.1
1.25.13
hashicorp/boundary:0.8.1fb70bd9210ff
golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd
stdlib@go1.17.10
0.55.0
1.25.13

Open the chart page →

4,966
u-storeunifieVerified publisher1.2.01 of 1See more

u-store unifie 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
public.ecr.aws/g4a0y2u8/unifie-store:staging-19925a2057fabc948
stdlib@go1.20.12
1.25.13

Open the chart page →

15,329
taigaunxwaresVerified publisher2026.3.82 of 6See more

taiga unxwares 2026.3.8

2 of the 6 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
taigaio/taiga-back:latest4beed8f62c9f
stdlib@go1.24.4
1.25.13
taigaio/taiga-protected:latestfd4568a97a59
stdlib@go1.24.4
1.25.13

Open the chart page →

9,263
upbot-operatorupbot-operator0.0.202 of 2See more

upbot-operator upbot-operator 0.0.20

2 of the 2 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
alpine/k8s:1.28.13e5c0b053fed7
golang.org/x/net@v0.12.0
stdlib@go1.22.5
0.55.0
1.25.13
ghcr.io/upbothq/upbot-operator:v0.0.20e5da24947c91
golang.org/x/net@v0.38.0
stdlib@go1.24.9
0.55.0
1.25.13

Open the chart page →

4,487
user-componentuser-component1.2.01 of 4See more

user-component user-component 1.2.0

1 of the 4 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/user-component-php:latest198db44fabb5
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
stdlib@go1.13.10
0.55.0
1.25.13

Open the chart page →

7,315
user-manager-serveruser-manager-server1.27.11 of 1See more

user-manager-server user-manager-server 1.27.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/user-manager-server:1.27.1628a14449241
golang.org/x/net@v0.38.0
stdlib@go1.23.12
0.55.0
1.25.13

Open the chart page →

757
phonebook-chartusuladamsVerified publisher0.1.51 of 3See more

phonebook-chart usuladams 0.1.5

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
stdlib@go1.18.2
1.25.13

Open the chart page →

3,176
v2ray-proxyv2ray-proxy0.2.41 of 1See more

v2ray-proxy v2ray-proxy 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
pinclr/v2ray-proxy:latestf37f250b7091
golang.org/x/net@v0.7.0
stdlib@go1.20.2
0.55.0
1.25.13

Open the chart page →

1,962
vault-gcp-secretsvault-gcp-secrets1.19.51 of 1See more

vault-gcp-secrets vault-gcp-secrets 1.19.5

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/tjm/vault-gcp-secrets:v1.19.59f157fe035f1
golang.org/x/net@v0.40.0
stdlib@go1.24.3
0.55.0
1.25.13

Open the chart page →

2,448
vearchvearch3.3.42 of 4See more

vearch vearch 3.3.4

2 of the 4 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
prom/prometheus:v2.13.10a8caa2e9f19
golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80
stdlib@go1.13.1
0.55.0
1.25.13
vearch/vearch:3.3.40768af33f9d9
golang.org/x/net@v0.10.0
stdlib@go1.19.9
0.55.0
1.25.13

Open the chart page →

5,023
devportal-admin-uiveecode-platformVerified publisher0.5.41 of 1See more

devportal-admin-ui veecode-platform 0.5.4

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
veecode/devportal-admin-ui:0.4.30c69fd286b489
golang.org/x/net@v0.23.0
stdlib@go1.22.3
0.55.0
1.25.13

Open the chart page →

5,294
victoria-logs-clustervictoriametricsVerified publisher0.2.81 of 1See more

victoria-logs-cluster victoriametrics 0.2.8

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
victoriametrics/victoria-logs:v1.52.047b820890d64
stdlib@go1.26.5
1.25.13

Open the chart page →

60
victoria-traces-clustervictoriametricsVerified publisher0.2.101 of 1See more

victoria-traces-cluster victoriametrics 0.2.10

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
victoriametrics/victoria-traces:v0.11.09947b14b6b9b
stdlib@go1.26.5
1.25.13

Open the chart page →

56
riveruivirtualrootVerified publisher0.1.31 of 1See more

riverui virtualroot 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/riverqueue/riverui:0.5.32dc54179b25a
golang.org/x/net@v0.23.0
stdlib@go1.23.0
0.55.0
1.25.13

Open the chart page →

1,135
go-egvoid-xmh1.1.13 of 3See more

go-eg void-xmh 1.1.1

3 of the 3 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
voidxmh/xmh-auther:v193e42a569ca8
stdlib@go1.16.5
1.25.13
voidxmh/xmh-cacher:v11b7397412320
stdlib@go1.16.5
1.25.13
voidxmh/xmh-ui:v12ff3f2146547
stdlib@go1.16.5
1.25.13

Open the chart page →

7,467
phpipamvquieVerified publisher1.0.31 of 3See more

phpipam vquie 1.0.3

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
library/mariadb:10.11.21c33370a599c
stdlib@go1.16.7
1.25.13

Open the chart page →

7,093
vultr-ccmvultrVerified publisher1.3.01 of 1See more

vultr-ccm vultr 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
vultr/vultr-cloud-controller-manager:v0.3.01806f17d620c
golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7
stdlib@go1.16.7
0.55.0
1.25.13

Open the chart page →

3,042
waardepapierenwaardepapieren1.0.01 of 3See more

waardepapieren waardepapieren 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/waardepapieren-php:latestb2666ffcbad8
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
stdlib@go1.13.10
0.55.0
1.25.13

Open the chart page →

8,090
waardepapieren-baliewaardepapieren-balie1.0.01 of 3See more

waardepapieren-balie waardepapieren-balie 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/waardepapieren-balie-php:latestf36c423cd259
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
stdlib@go1.13.10
0.55.0
1.25.13

Open the chart page →

7,882
waardepapieren-registerwaardepapieren-register1.1.01 of 4See more

waardepapieren-register waardepapieren-register 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/waardepapieren-register-php:latest9affab218351
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
stdlib@go1.13.10
0.55.0
1.25.13

Open the chart page →

7,441

Container images carrying it

5,366 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
slagattollas/weatherservice-practica:latest68e7f56393fc
stdlib@go1.15.6
1.25.13
1
slamdev/config-connector-templater:0.0.3a234541c9fa8
golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b
stdlib@go1.16.5
0.55.0
1.25.13
1
slamdev/external-secrets-operator:0.0.8855f6625dda4
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
stdlib@go1.13.15
0.55.0
1.25.13
1
slamdev/flux-notifier:v0.0.8b173d809132d
stdlib@go1.13.11
1.25.13
1
slamdev/gke-preemptible-notifier:v0.0.3d5d6430108a3
golang.org/x/net@v0.0.0-20200501053045-e0ff5e5a1de5
stdlib@go1.13.11
0.55.0
1.25.13
1
smailkoz/torrserver:1.0.1117b52d15de8f0
golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f
stdlib@go1.17.5
0.55.0
1.25.13
1
snyk/kubernetes-monitor:2.23.26fb5ad76ce84e
golang.org/x/net@v0.54.0
stdlib@go1.25.10
0.55.0
1.25.13
1
softonic/homing-pigeon:0.9.6f26d467b7b82
golang.org/x/net@v0.41.0
stdlib@go1.23.10
0.55.0
1.25.13
1
softonic/node-policy-webhook:0.1.2ab6098c04a53
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
stdlib@go1.14.6
0.55.0
1.25.13
1
softonic/pod-defaulter:0.1.072017aed5902
golang.org/x/net@v0.0.0-20200707034311-ab3426394381
stdlib@go1.14.9
0.55.0
1.25.13
1
softonic/preemptible-killer:1.2.6-294b87f1fb362
golang.org/x/net@v0.0.0-20190620200207-3b0461eec859
stdlib@go1.14.10
0.55.0
1.25.13
1
softonic/rate-limit-operator:0.1.1910f6de37763
golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7
stdlib@go1.13.15
0.55.0
1.25.13
1
softwaremill/bootzooka:latest845b5e8f8056
golang.org/x/net@v0.40.0
stdlib@go1.26.2
0.55.0
1.25.13
1
solarwinds/solarwinds-otel-collector:0.152.3-k8s3c1110e8bdfb
stdlib@go1.26.4-X:boringcrypto
1.25.13
1
soldevelo/pgpool:4.6.3-debian-12-r0044d16a65129
stdlib@go1.25.4
1.25.13
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
golang.org/x/net@v0.0.0-20220107192237-5cfca573fb4d
stdlib@go1.18.2
0.55.0
1.25.13
1
sonroyaalmerol/docker-sogo:5.12.43f60f3abe990
golang.org/x/net@v0.49.0
stdlib@go1.24.13
0.55.0
1.25.13
1
sophos/nginx-vts-exporter:latestf1073556b29b
stdlib@go1.13.6
1.25.13
1
sorintlab/stolon:v0.16.0-pg1236b45c0f97fc
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
stdlib@go1.13.8
0.55.0
1.25.13
1
sosedoff/pgweb:latesta5256d416e2e
golang.org/x/net@v0.47.0
stdlib@go1.24.6
0.55.0
1.25.13
1
speckle/alertmanager-discord:latestf6221ff308e9
stdlib@go1.22.4
1.25.13
1
splatform/stratos-jetstream:4.4.0-bc65c315c886311c331b9
golang.org/x/net@v0.0.0-20200822124328-c89045814202
stdlib@go1.13.4
0.55.0
1.25.13
1
splunk/splunk-operator:2.0.0c4e0d3146226
golang.org/x/net@v0.0.0-20211029224645-99673261e6eb
stdlib@go1.17.12
0.55.0
1.25.13
1
springhack/frpc_ingress:latest4aceb821da88
golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781
stdlib@go1.19.5
0.55.0
1.25.13
1
sslhep/servicex_app:v1.8.51d12f943cec5
stdlib@go1.26.5
1.25.13
1
sstarcher/ecr-cleaner:0.1.12d43c390cb19
stdlib@go1.14.2
1.25.13
1
sstarcher/helm-exporter:0.5.011769d01ba35
golang.org/x/net@v0.0.0-20191028085509-fe3aa8a45271
stdlib@go1.13.6
0.55.0
1.25.13
1
sstarcher/kube-ebs-tagger:0.1.01f8cae8cfa80
golang.org/x/net@v0.0.0-20191028085509-fe3aa8a45271
stdlib@go1.13.9
0.55.0
1.25.13
1
stakater/forecastle:v2.0.2382cd9572352
golang.org/x/net@v0.51.0
stdlib@go1.26.4
0.55.0
1.25.13
1
stakater/forecastle:v1.0.13886b24cdef409
golang.org/x/net@v0.10.0
stdlib@go1.22.1
0.55.0
1.25.13
1
stakater/gitwebhookproxy:v0.2.79c1226e5270cd
stdlib@go1.13.1
1.25.13
1
stakater/k8s-cost-optimizer:v0.0.5450415ce1b4e
golang.org/x/net@v0.0.0-20211209124913-491a49abca63
stdlib@go1.17.8
0.55.0
1.25.13
1
stakater/konfigurator:v0.1.393409565b1ef5
golang.org/x/net@v0.17.0
stdlib@go1.17.13
0.55.0
1.25.13
1
stakater/reloader:v1.0.15f4b87a8e56d4
golang.org/x/net@v0.7.0
stdlib@go1.20.1
0.55.0
1.25.13
1
stakater/tronador:v0.0.137ce9acf2722
golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b
stdlib@go1.15.11
0.55.0
1.25.13
1
stakater/whitelister:v0.0.1639107924063e
golang.org/x/net@v0.0.0-20200202094626-16171245cfb2
stdlib@go1.13.1
0.55.0
1.25.13
1
stakater/workshop-operator:v0.0.3897bf456cc97c
golang.org/x/net@v0.0.0-20210405180319-a5a99cb37ef4
stdlib@go1.16.13
0.55.0
1.25.13
1
stakkato95/twitter-service-analytics:0.1.05d48906d66b3
golang.org/x/net@v0.0.0-20220520000938-2e3eb7b945c2
stdlib@go1.18.3
0.55.0
1.25.13
1
stakkato95/twitter-service-graphql:0.1.13cbe857234f2
golang.org/x/net@v0.0.0-20220412020605-290c469a71a5
stdlib@go1.18.3
0.55.0
1.25.13
1
stakkato95/twitter-service-tweets:0.1.18412d8a8cac3
stdlib@go1.18.3
1.25.13
1
stakkato95/twitter-service-users:0.1.1456049efee9a
golang.org/x/net@v0.0.0-20220412020605-290c469a71a5
stdlib@go1.18.3
0.55.0
1.25.13
1
stashapp/stash:latest24dbd7607174
golang.org/x/net@v0.0.0-20200822124328-c89045814202
stdlib@go1.13.15
0.55.0
1.25.13
1
stashapp/stash:v0.31.1df744af5a0c9
golang.org/x/net@v0.47.0
stdlib@go1.24.3
0.55.0
1.25.13
1
stashapp/stash-box:latesta534c8afdf39
golang.org/x/net@v0.38.0
stdlib@go1.23.10
0.55.0
1.25.13
1
statcan/ingress-istio-controller:1.4.0d7d6bd180c46
golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7
stdlib@go1.18.10
0.55.0
1.25.13
1
statcan/kubernetes-sidecar-terminator:2.0.2bc361ee7748f
golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10
stdlib@go1.19.10
0.55.0
1.25.13
1
statping/statping:v0.90.6532f26fffca46
golang.org/x/net@v0.0.0-20200625001655-4c5254603344
stdlib@go1.14.8
0.55.0
1.25.13
1
steamcmd/steamcmd:latest5028a25268e7
stdlib@go1.26.5
1.25.13
1
stevenweathers/thunderdome-planning-poker:latestc7eb7b10f186
golang.org/x/net@v0.52.0
stdlib@go1.26.4
0.55.0
1.25.13
1
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
golang.org/x/net@v0.0.0-20201022231255-08b38378de70
stdlib@go1.15.6
0.55.0
1.25.13
1

syft 1.42.1 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.