CVE-2026-39821

High

Advisory

Published 22 May 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 8.2; base score, highest
EPSS: 0.007; 51st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 4,642; of 17,813 indexed, latest versions
Container images: 5,366; deployed by those charts
Fix available: 3 of 3; affected packages

Red Hat Security Advisory: git-lfs security update

Carried by container images the latest versions of 4,642 of 17,813 indexed charts deploy, on 5,366 images.

Affected package	Affected versions	Fixed in	Images
git-lfsrpm	2.13.3-3.el8_6	0:3.4.1-11.el8_10	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+191 more	1.25.13	5,324
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+220 more	0.55.0	3,744

OSV records: RHSA-2026:30853 GO-2026-5026

Charts affected

4,642 by stars

Chart

Latest

Affected images

Radar Score

glpieftechcombr-glpi

2.12.1

1 of 5 See more

glpi eftechcombr-glpi 2.12.1

1 of the 5 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/mariadb :12.3.2	a02fe89cb597	stdlib@go1.24.6	1.25.13

Open the chart page →

4,620

egagenteginnovations

0.10.0

1 of 1 See more

egagent eginnovations 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
eginnovations/agent :7.5.4	e4dfe242fe9f	stdlib@go1.26.4	1.25.13

Open the chart page →

1,357

glideeinstack

0.0.2

1 of 1 See more

glide einstack 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/einstack/glide :0.0.1-alpine	ab3f7d0a1d50	golang.org/x/net@v0.19.0 stdlib@go1.21.6	0.55.0 1.25.13

Open the chart page →

1,335

elchi-discoveryelchi

1.0.0

1 of 1 See more

elchi-discovery elchi 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
jhonbrownn/elchi-discovery :latest	8f6551ecc98c	golang.org/x/net@v0.13.0 stdlib@go1.23.1	0.55.0 1.25.13

Open the chart page →

638

elchi-stackelchi

1.13.0

6 of 10 See more

elchi-stack elchi 1.13.0

6 of the 10 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
grafana/grafana :12.2.0	74144189b384	golang.org/x/net@v0.43.0 stdlib@go1.24.6	0.55.0 1.25.13
jhonbrownn/elchi-backend :v1.6.14-v0.14.0-envoy1.39.0	31aee9ba2c63	stdlib@go1.25.12	1.25.13
jhonbrownn/elchi-collector :v0.1.11	9fdd0724865e	stdlib@go1.26.4	1.25.13
library/mongo :6.0.12	646902910d6a	stdlib@go1.18.2	1.25.13
otel/opentelemetry-collector-contrib :0.89.0	995f17004231	golang.org/x/net@v0.18.0 stdlib@go1.21.4	0.55.0 1.25.13
victoriametrics/victoria-metrics :v1.93.5	77a9815d0640	golang.org/x/net@v0.15.0 stdlib@go1.21.1	0.55.0 1.25.13

Open the chart page →

15,785

navidromeemmas-charts

0.0.6

1 of 1 See more

navidrome emmas-charts 0.0.6

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
deluan/navidrome :0.50.0	2cf4442b0099	golang.org/x/net@v0.18.0 stdlib@go1.21.0	0.55.0 1.25.13

Open the chart page →

2,130

enbuildenbuild

0.0.50

3 of 6 See more

enbuild enbuild 0.0.50

3 of the 6 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-backend :1.0.31	c7afac3446d6	golang.org/x/net@v0.47.0 stdlib@go1.25.7	0.55.0 1.25.13
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer :1.0.31	0e3cd8c7776d	golang.org/x/net@v0.50.0 stdlib@go1.25.7	0.55.0 1.25.13
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/mongodb :4.4.5	cf72810d33f5	stdlib@go1.15.8	1.25.13

Open the chart page →

32,055

eoapieoapi

0.16.3

1 of 7 See more

eoapi eoapi 0.16.3

1 of the 7 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
alpine/kubectl :1.34.1	8413f8890d19	golang.org/x/net@v0.38.0 stdlib@go1.24.6	0.55.0 1.25.13

Open the chart page →

2,991

nexus-operatorepmdedp-dev

2.11.0-MDTU-DDM-SNAPSHOT.1

1 of 1 See more

nexus-operator epmdedp-dev 2.11.0-MDTU-DDM-SNAPSHOT.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
epamedp/nexus-operator :2.11.0-MDTU-DDM-SNAPSHOT.1	449a53804699	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.17.2	0.55.0 1.25.13

Open the chart page →

2,267

paraerudika

0.3.0

1 of 1 See more

para erudika 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
erudikaltd/para :latest_stable	235e0bc53da2	stdlib@go1.26.5	1.25.13

Open the chart page →

1,195

httpbingoestahn

0.1.1

1 of 1 See more

httpbingo estahn 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
mccutchen/go-httpbin :v2.2.2	5994403ef75b	stdlib@go1.16.2	1.25.13

Open the chart page →

1,360

beaconchain-explorerethereum-helm-charts

0.1.6

1 of 2 See more

beaconchain-explorer ethereum-helm-charts 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
gobitfly/eth2-beaconchain-explorer :latest	1d08a7986348	golang.org/x/net@v0.34.0 stdlib@go1.23.5	0.55.0 1.25.13

Open the chart page →

3,120

ethereumjsethereum-helm-charts

0.1.2

1 of 2 See more

ethereumjs ethereum-helm-charts 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ethpandaops/ethereumjs :master	fb84b718500f	stdlib@go1.23.12	1.25.13

Open the chart page →

1,593

genesis-generatorethereum-helm-charts

0.2.3

1 of 2 See more

genesis-generator ethereum-helm-charts 0.2.3

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
skylenet/ethereum-genesis-generator :latest	210353ce7c89	stdlib@go1.17.13	1.25.13

Open the chart page →

3,138

ipfs-clusterethereum-helm-charts

0.1.14

3 of 3 See more

ipfs-cluster ethereum-helm-charts 0.1.14

3 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ipfs/ipfs-cluster :latest	a83266c524f1	golang.org/x/net@v0.53.0 stdlib@go1.26.3	0.55.0 1.25.13
ipfs/kubo :latest	b293923d66e4	stdlib@go1.26.5	1.25.13
lachlanevenson/k8s-kubectl :v1.25.4	af5cea3f2e40	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.3	0.55.0 1.25.13

Open the chart page →

4,717

iobrokereugen

0.2.6

1 of 1 See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/buanet/iobroker :v9.1.2	ca7dc7362968	stdlib@go1.19.8	1.25.13

Open the chart page →

11,588

evccevcc

1.0.47

1 of 1 See more

evcc evcc 1.0.47

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
evcc/evcc :0.300.8	ddf2a25afce5	golang.org/x/net@v0.49.0 stdlib@go1.25.6	0.55.0 1.25.13

Open the chart page →

1,195

event-exporterevent-exporter

0.1.17

1 of 1 See more

event-exporter event-exporter 0.1.17

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
kubestar/event-exporter :latest	656606941255	golang.org/x/net@v0.17.0 stdlib@go1.20.14	0.55.0 1.25.13

Open the chart page →

1,210

events-exporterevents-exporter

0.0.4

1 of 1 See more

events-exporter events-exporter 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/nabokihms/events_exporter :latest	68d44646e8b2	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.19.5	0.55.0 1.25.13

Open the chart page →

2,135

github-actions-runner-operatorevryfs-oss

2.8.1

1 of 1 See more

github-actions-runner-operator evryfs-oss 2.8.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
quay.io/evryfs/github-actions-runner-operator :v0.11.1	6b084e0bd082	golang.org/x/net@v0.12.0 stdlib@go1.21.1	0.55.0 1.25.13

Open the chart page →

1,237

ext-postgres-operatorext-postgres-operator

3.0.0

1 of 1 See more

ext-postgres-operator ext-postgres-operator 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/movetokube/postgres-operator :2.4.0	def57d85a2da	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.55.0 1.25.13

Open the chart page →

401

akauntingf3k-tech

1.3121.0

1 of 4 See more

akaunting f3k-tech 1.3121.0

1 of the 4 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
bitnamilegacy/mariadb :latest	bbd4e17f1ef8	stdlib@go1.24.5	1.25.13

Open the chart page →

4,260

vidcheckfactly

0.5.2

1 of 2 See more

vidcheck factly 0.5.2

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
factly/vidcheck-server :0.12.0	87064eb0463c	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.14.2	0.55.0 1.25.13

Open the chart page →

3,619

ecr-cleanupfairwinds-stable

1.2.8

1 of 1 See more

ecr-cleanup fairwinds-stable 1.2.8

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
danielfm/kube-ecr-cleanup-controller :0.1.10	12485563b1d0	golang.org/x/net@v0.7.0 stdlib@go1.19.6	0.55.0 1.25.13

Open the chart page →

1,004

falco-operatorfalcosecurity

0.3.1

1 of 1 See more

falco-operator falcosecurity 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
falcosecurity/falco-operator :0.4.1	8a99fcc57a57	golang.org/x/net@v0.53.0 stdlib@go1.26.0	0.55.0 1.25.13

Open the chart page →

386

fastapi-microservice-appfast-api-microservice-app

1.3.0

1 of 4 See more

fastapi-microservice-app fast-api-microservice-app 1.3.0

1 of the 4 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/mongo :7.0	9854f7139445	stdlib@go1.26.5	1.25.13

Open the chart page →

9,630

featurehubfeaturehub

4.1.6

3 of 7 See more

featurehub featurehub 4.1.6

3 of the 7 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/nats :2.10.5-alpine	85319e5e541b	stdlib@go1.21.4	1.25.13
natsio/nats-box :0.14.1	a67913df95f1	golang.org/x/net@v0.15.0 stdlib@go1.21.3	0.55.0 1.25.13
natsio/nats-server-config-reloader :0.13.0	b3359eeb10bf	stdlib@go1.20.5	1.25.13

Open the chart page →

8,691

federidfederid

0.1.2

1 of 1 See more

federid federid 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
federid/webhook :0.1.0	fbfb7c6510a7	golang.org/x/net@v0.30.0 stdlib@go1.23.3	0.55.0 1.25.13

Open the chart page →

2,121

fencemasterfencemaster

0.1.13

1 of 1 See more

fencemaster fencemaster 0.1.13

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/rvbsalgado/fencemaster :1.0.0-rc.20	7056a6aae439	golang.org/x/net@v0.43.0 stdlib@go1.25.8	0.55.0 1.25.13

Open the chart page →

254

taigafermosit

0.0.11

2 of 7 See more

taiga fermosit 0.0.11

2 of the 7 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
taigaio/taiga-back :latest	4beed8f62c9f	stdlib@go1.24.4	1.25.13
taigaio/taiga-protected :latest	fd4568a97a59	stdlib@go1.24.4	1.25.13

Open the chart page →

8,611

ferriskeyferriskey

0.8.0

1 of 3 See more

ferriskey ferriskey 0.8.0

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/postgres :17	67f41722b7a8	stdlib@go1.24.6	1.25.13

Open the chart page →

2,212

ai-gatewayferro-labs

1.2.0

1 of 1 See more

ai-gateway ferro-labs 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/ferro-labs/ai-gateway :1.2.0	baa285ec0fc9	stdlib@go1.25.12	1.25.13

Open the chart page →

123

file-manager-serverfile-manager-server

1.11.0

1 of 1 See more

file-manager-server file-manager-server 1.11.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/file-manager-server :1.11.0	301216788e93	golang.org/x/net@v0.38.0 stdlib@go1.23.11	0.55.0 1.25.13

Open the chart page →

770

fission-corefission-charts

1.14.1

3 of 3 See more

fission-core fission-charts 1.14.1

3 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
fission/fission-bundle :1.14.1	3fcfd8a0fa5d	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.15.14	0.55.0 1.25.13
fission/pre-upgrade-checks :1.14.1	fa0f24cdb9cd	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.15.14	0.55.0 1.25.13
fission/reporter :1.14.1	04c6e06af175	stdlib@go1.15.14	1.25.13

Open the chart page →

7,109

openldapfluktuid

0.1.1

1 of 2 See more

openldap fluktuid 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
osixia/openldap :1.5.0	18742e9c449c	golang.org/x/net@v0.0.0-20201010224723-4f7140c49acb stdlib@go1.15.5	0.55.0 1.25.13

Open the chart page →

3,315

flyway-operatorflyway-operator

0.2.13

1 of 1 See more

flyway-operator flyway-operator 0.2.13

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/davidkarlsen/flyway-operator :0.2.13	66f60b461c0d	golang.org/x/net@v0.38.0 stdlib@go1.24.4	0.55.0 1.25.13

Open the chart page →

641

contentserverfoomo

0.7.0

1 of 1 See more

contentserver foomo 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
foomo/contentserver :1.21.0	824f41463e9b	stdlib@go1.26.5	1.25.13

Open the chart page →

289

free5gcfree5gc

0.1.3

12 of 12 See more

free5gc free5gc 0.1.3

12 of the 12 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
bitnami/mongodb :latest	e46cffb66274	stdlib@go1.26.5	1.25.13
free5gc/amf :v3.4.3	1bc96ff5a2a6	golang.org/x/net@v0.24.0 stdlib@go1.21.8	0.55.0 1.25.13
free5gc/ausf :v3.4.3	687ff4daf5da	golang.org/x/net@v0.23.0 stdlib@go1.21.8	0.55.0 1.25.13
free5gc/chf :v3.4.3	e2a4dd98a4ed	golang.org/x/net@v0.24.0 stdlib@go1.21.8	0.55.0 1.25.13
free5gc/nrf :v3.4.3	99e46b860efb	golang.org/x/net@v0.23.0 stdlib@go1.21.8	0.55.0 1.25.13
free5gc/nssf :v3.4.3	dfe8c68c04b4	golang.org/x/net@v0.23.0 stdlib@go1.21.8	0.55.0 1.25.13
free5gc/pcf :v3.4.3	f712e8ecd927	golang.org/x/net@v0.23.0 stdlib@go1.21.8	0.55.0 1.25.13
free5gc/smf :v3.4.3	60e38baa4b10	golang.org/x/net@v0.23.0 stdlib@go1.21.8	0.55.0 1.25.13
free5gc/udm :v3.4.3	2f68df062a50	golang.org/x/net@v0.23.0 stdlib@go1.21.8	0.55.0 1.25.13
free5gc/udr :v3.4.3	c0783bcdcbdc	golang.org/x/net@v0.23.0 stdlib@go1.21.8	0.55.0 1.25.13
free5gc/upf :v3.4.3	b6b362a39fdd	golang.org/x/net@v0.23.0 stdlib@go1.21.8	0.55.0 1.25.13
free5gc/webui :v3.4.3	9adeb18492cb	golang.org/x/net@v0.23.0 stdlib@go1.21.8	0.55.0 1.25.13

Open the chart page →

10,715

fsmfsm

0.2.11

2 of 5 See more

fsm fsm 0.2.11

2 of the 5 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
flomesh/fsm-ingress-pipy :0.2.11	cc39c96711c4	golang.org/x/net@v0.10.0 stdlib@go1.19.13	0.55.0 1.25.13
flomesh/fsm-manager :0.2.11	22f849c70b25	golang.org/x/net@v0.10.0 stdlib@go1.19.13	0.55.0 1.25.13

Open the chart page →

4,228

function-mesh-operatorfunction-mesh

0.2.43

1 of 1 See more

function-mesh-operator function-mesh 0.2.43

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
streamnative/function-mesh :v0.28.0	77939c8aa269	golang.org/x/net@v0.48.0 stdlib@go1.25.11	0.55.0 1.25.13

Open the chart page →

338

adguard-homegabe565

0.3.25

1 of 2 See more

adguard-home gabe565 0.3.25

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
adguard/adguardhome :v0.107.56	c64a0b37f7b9	golang.org/x/net@v0.33.0 stdlib@go1.23.5	0.55.0 1.25.13

Open the chart page →

815

home-assistantgabe565

0.17.0

1 of 1 See more

home-assistant gabe565 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/home-assistant/home-assistant :latest	d89226851697	golang.org/x/net@v0.49.0 stdlib@go1.25.6	0.55.0 1.25.13

Open the chart page →

2,162

memosgabe565

0.17.0

1 of 1 See more

memos gabe565 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/usememos/memos :0.24.0	4723d86e6797	golang.org/x/net@v0.34.0 stdlib@go1.23.6	0.55.0 1.25.13

Open the chart page →

1,477

dexgabibbo97

4.0.4

1 of 1 See more

dex gabibbo97 4.0.4

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.28.1	5e88f2205de1	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb stdlib@go1.16.2	0.55.0 1.25.13

Open the chart page →

3,399

garage-uigarage-ui

0.12.1

1 of 1 See more

garage-ui garage-ui 0.12.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
noooste/garage-ui :v0.12.1	0b68a9237da6	stdlib@go1.26.0	1.25.13

Open the chart page →

765

garmgarm

4.2.0

1 of 3 See more

garm garm 4.2.0

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/igrikus/garm-operator :4.2.0	9e24d8a6a3b2	golang.org/x/net@v0.53.0 stdlib@go1.26.2	0.55.0 1.25.13

Open the chart page →

842

gateboardgateboard

1.12.5

1 of 1 See more

gateboard gateboard 1.12.5

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
udhos/gateboard :1.12.5	3acc0e7599bf	golang.org/x/net@v0.46.0 stdlib@go1.25.3	0.55.0 1.25.13

Open the chart page →

1,482

gateboard-discoverygateboard

1.9.5

1 of 1 See more

gateboard-discovery gateboard 1.9.5

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
udhos/gateboard-discovery :1.9.5	5567c9363c4c	golang.org/x/net@v0.46.0 stdlib@go1.25.3	0.55.0 1.25.13

Open the chart page →

1,209

gboxgbox

1.0.5

1 of 2 See more

gbox gbox 1.0.5

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
gboxproxy/gbox :v1.0.6	3a9f4a711d5c	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.17.9	0.55.0 1.25.13

Open the chart page →

2,539

adguard-homegeek-cookbook

5.5.2

1 of 2 See more

adguard-home geek-cookbook 5.5.2

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
adguard/adguardhome :v0.107.7	b9974aed13d0	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.17.9	0.55.0 1.25.13

Open the chart page →

1,743

Container images carrying it

5,366 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
gcr.io/kubecost1/cost-model :prod-1.108.1	852f7923fad3	golang.org/x/net@v0.18.0 stdlib@go1.21.5	0.55.0 1.25.13	1
gcr.io/kubecost1/cost-model :prod-1.82.2	989a60847416	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.16.5	0.55.0 1.25.13	1
gcr.io/kubecost1/cost-model :prod-2.6.3	9e507ac0aebb	golang.org/x/net@v0.34.0 stdlib@go1.23.4	0.55.0 1.25.13	1
gcr.io/kubecost1/server :prod-1.82.2	2b1a3d08caac	golang.org/x/net@v0.0.0-20190311183353-d8887717615a stdlib@go1.16.5	0.55.0 1.25.13	1
gcr.io/kubecost1/server :prod-1.81.0	a348db3e4d74	golang.org/x/net@v0.0.0-20190311183353-d8887717615a stdlib@go1.16.4	0.55.0 1.25.13	1
gcr.io/ml-pipeline/api-server :2.3.0	39661bd823e8	golang.org/x/net@v0.21.0 stdlib@go1.21.7	0.55.0 1.25.13	1
gcr.io/ml-pipeline/api-server :2.0.0-alpha.5	dc6ca05bb94f	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.6	0.55.0 1.25.13	1
gcr.io/ml-pipeline/cache-server :2.3.0	293941ee4f65	golang.org/x/net@v0.21.0 stdlib@go1.21.7	0.55.0 1.25.13	1
gcr.io/ml-pipeline/cache-server :2.0.0-alpha.5	83e79c709df3	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.6	0.55.0 1.25.13	1
gcr.io/ml-pipeline/mysql :5.7-debian	df28187b5455	stdlib@go1.16.7	1.25.13	1
gcr.io/ml-pipeline/persistenceagent :2.0.0-alpha.5	00db9796a37b	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.6	0.55.0 1.25.13	1
gcr.io/ml-pipeline/persistenceagent :2.3.0	109ac1b38c41	golang.org/x/net@v0.21.0 stdlib@go1.21.7	0.55.0 1.25.13	1
gcr.io/ml-pipeline/scheduledworkflow :2.0.0-alpha.5	795a0c8a0e13	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.6	0.55.0 1.25.13	1
gcr.io/ml-pipeline/scheduledworkflow :2.3.0	f7e67e0bc071	golang.org/x/net@v0.21.0 stdlib@go1.21.7	0.55.0 1.25.13	1
gcr.io/ml-pipeline/viewer-crd-controller :2.0.0-alpha.5	34403f9f94be	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.6	0.55.0 1.25.13	1
gcr.io/ml-pipeline/viewer-crd-controller :2.3.0	8cf8213d69e4	golang.org/x/net@v0.21.0 stdlib@go1.21.7	0.55.0 1.25.13	1
gcr.io/ml-pipeline/workflow-controller :v3.3.8-license-compliance	6c8e4e2a6443	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.11	0.55.0 1.25.13	1
gcr.io/pingcap-public/deadmansswitch :1.0	4861d81aa528	stdlib@go1.16.3	1.25.13	1
gcr.io/press-labs-public/dashboard :1.8.19	b88f88070fb0	golang.org/x/net@v0.10.0 stdlib@go1.21.1	0.55.0 1.25.13	1
gcr.io/projectsigstore/cosigned	784518ff3ee7	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.17.9	0.55.0 1.25.13	1
gcr.io/projectsigstore/policy-webhook	82940e8c3e0d	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.17.9	0.55.0 1.25.13	1
gcr.io/spotit-today/spot-ocean-admission-controller :0.1.6	4f634aeb31b8	golang.org/x/net@v0.44.0 stdlib@go1.24.13	0.55.0 1.25.13	1
ghcr.io/0xerr0r/blocky :v0.29.0	a6d99f323d30	golang.org/x/net@v0.51.0 stdlib@go1.26.0	0.55.0 1.25.13	1
ghcr.io/0xerr0r/blocky :v0.18	b15824464acb	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.7	0.55.0 1.25.13	1
ghcr.io/291-group/lan-orangutan :3.3.8	86b55c80eeb1	stdlib@go1.25.12	1.25.13	1
ghcr.io/abcdesktopio/keysgenerator :4.4	ca0662bc92a4	golang.org/x/net@v0.49.0	0.55.0	1
ghcr.io/abstract-foundation/zksync-external-node-sidecar :v1.0.0	3e705d0eb1ce	golang.org/x/net@v0.7.0 stdlib@go1.18.10	0.55.0 1.25.13	1
ghcr.io/actions/gha-runner-scale-set-controller :0.14.2	1b4c7f62e971	golang.org/x/net@v0.52.0 stdlib@go1.26.3	0.55.0 1.25.13	1
ghcr.io/adfinis/kubernetes-etcd-backup :v1.4.6	8ec6c4812a7e	golang.org/x/net@v0.38.0 stdlib@go1.23.7	0.55.0 1.25.13	1
ghcr.io/aetrius/msockperf-client/msockperf-client :main	820af919c5e2	stdlib@go1.22.1	1.25.13	1
ghcr.io/aeyrtonvs/k8s-drain-surge :0.0.3	38bce7856b5c	golang.org/x/net@v0.53.0 stdlib@go1.25.10	0.55.0 1.25.13	1
ghcr.io/afairgiant/medikeep :v0.70.0	4c28334f3c79	stdlib@go1.19.8	1.25.13	1
ghcr.io/agjmills/sentry-operator :v1.2.5	00389ef6a00e	golang.org/x/net@v0.30.0 stdlib@go1.24.2	0.55.0 1.25.13	1
ghcr.io/ajnart/homarr :0.16.0	737ec361ed24	stdlib@go1.22.5	1.25.13	1
ghcr.io/ajnart/homarr :latest	e103abadfb52	stdlib@go1.22.5	1.25.13	1
ghcr.io/alekc/kpubber :v0.0.2	a462d5797e14	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.16.9	0.55.0 1.25.13	1
ghcr.io/alex123012/annotations-exporter :v0.5.0	4c2b8dbc798e	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.3	0.55.0 1.25.13	1
ghcr.io/alexbakker/alertmanager-ntfy :1.0.1	2f4db8064595	golang.org/x/net@v0.41.0 stdlib@go1.24.4	0.55.0 1.25.13	1
ghcr.io/alexellis/registry-creds :0.3.2-rc1	f5c72501e559	golang.org/x/net@v0.5.0 stdlib@go1.19.5	0.55.0 1.25.13	1
ghcr.io/alpineworks/ip :v1.0.0	4e0d4d51f0bc	golang.org/x/net@v0.34.0 stdlib@go1.24.2	0.55.0 1.25.13	1
ghcr.io/alpineworks/katalog-agent :v1.0.4	8f50bd568c2b	golang.org/x/net@v0.29.0 stdlib@go1.23.3	0.55.0 1.25.13	1
ghcr.io/alpineworks/katalog-backend :v1.0.7	7e7a26393cd1	golang.org/x/net@v0.29.0 stdlib@go1.23.3	0.55.0 1.25.13	1
ghcr.io/alpineworks/katalog-migrations :v1.0.5	62c44a384e13	golang.org/x/net@v0.29.0 stdlib@go1.23.1	0.55.0 1.25.13	1
ghcr.io/alpineworks/versitygw-webhook-pulsar-proxy :v1.0.0	6e9ced773732	golang.org/x/net@v0.40.0 stdlib@go1.24.4	0.55.0 1.25.13	1
ghcr.io/amaanx86/oci-prometheus-sd-proxy :latest	297a8379a328	stdlib@go1.26.4	1.25.13	1
ghcr.io/amruthpillai/reactive-resume :v5.3.0	c487ec5edcfe	stdlib@go1.26.4	1.25.13	1
ghcr.io/analogj/scrutiny :master-omnibus	18689773150d	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.20.14	0.55.0 1.25.13	1
ghcr.io/analogj/scrutiny :v0.9.2-web	71be54e99608	golang.org/x/net@v0.49.0 stdlib@go1.25.5	0.55.0 1.25.13	1
ghcr.io/andibraeu/cert-manager-webhook-inwx :v0.9.0	f015e745983e	golang.org/x/net@v0.48.0 stdlib@go1.25.7	0.55.0 1.25.13	1
ghcr.io/andylibrian/terjang :latest	20a46b199247	golang.org/x/net@v0.0.0-20211020060615-d418f374d309 stdlib@go1.16.4	0.55.0 1.25.13	1