CVE-2026-39821

High

Advisory

Published 22 May 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 8.2; base score, highest
EPSS: 0.007; 51st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 4,595; of 17,813 indexed, latest versions
Container images: 5,284; deployed by those charts
Fix available: 3 of 3; affected packages

Red Hat Security Advisory: git-lfs security update

Carried by container images the latest versions of 4,595 of 17,813 indexed charts deploy, on 5,284 images.

Affected package	Affected versions	Fixed in	Images
git-lfsrpm	2.13.3-3.el8_6	0:3.4.1-11.el8_10	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+190 more	1.25.13	5,245
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+220 more	0.55.0	3,698

OSV records: RHSA-2026:30853 GO-2026-5026

Charts affected

4,595 by stars

Chart

Latest

Affected images

Radar Score

ghostcloudpirates-ghost

0.20.25

3 of 3 See more

ghost cloudpirates-ghost 0.20.25

3 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/ghost :6.64.0	a31d03f1f629	stdlib@go1.26.4	1.25.13
library/mariadb :12.0.2	5b6a1eac15b8	stdlib@go1.18.2	1.25.13
library/mariadb :13.0.2	d4fdec0510ad	stdlib@go1.24.6	1.25.13

Open the chart page →

7,003

dumpscriptcloudscript

1.8.3

1 of 1 See more

dumpscript cloudscript 1.8.3

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/cloudscript-technology/dumpscript :v0.0.42-alpine-edge	fce5b6fd161c	golang.org/x/net@v0.47.0 stdlib@go1.26.2	0.55.0 1.25.13

Open the chart page →

2,129

clowardenclowarden

0.2.3

2 of 4 See more

clowarden clowarden 0.2.3

2 of the 4 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
artifacthub/postgres :latest	4fd34fa635cc	stdlib@go1.24.6	1.25.13
ghcr.io/cncf/clowarden/dbmigrator :v0.2.3	c022fd42de45	stdlib@go1.25.3	1.25.13

Open the chart page →

5,676

cluster-manager-servercluster-manager-server

1.8.0

1 of 1 See more

cluster-manager-server cluster-manager-server 1.8.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/cluster-manager-server :1.8.0	364b3ff0fcb7	golang.org/x/net@v0.38.0 stdlib@go1.24.5	0.55.0 1.25.13

Open the chart page →

753

cluster-registrycluster-registry-controller

0.2.12

1 of 1 See more

cluster-registry cluster-registry-controller 0.2.12

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/cisco-open/cluster-registry-controller :v0.2.12	937eff91df1e	golang.org/x/net@v0.7.0 stdlib@go1.18	0.55.0 1.25.13

Open the chart page →

1,708

coder-observabilitycoder-observability

0.7.3

14 of 21 See more

coder-observability coder-observability 0.7.3

14 of the 21 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
grafana/agent :v0.40.3	f6cbec9409be	golang.org/x/net@v0.20.0 stdlib@go1.22.1	0.55.0 1.25.13
grafana/grafana :10.4.19	a9043254ba16	golang.org/x/net@v0.40.0 stdlib@go1.24.3	0.55.0 1.25.13
grafana/loki :3.1.0	d947e68a84d9	golang.org/x/net@v0.23.0 stdlib@go1.22.2	0.55.0 1.25.13
grafana/loki-canary :3.1.0	39baf6d67f85	golang.org/x/net@v0.23.0 stdlib@go1.22.2	0.55.0 1.25.13
prom/memcached-exporter :v0.14.2	d8a61419b841	golang.org/x/net@v0.17.0 stdlib@go1.21.5	0.55.0 1.25.13
ghcr.io/jimmidyson/configmap-reload :v0.12.0	a7c754986900	stdlib@go1.21.1	1.25.13
quay.io/minio/mc :RELEASE.2022-09-16T09-16-47Z	546a8b52d7b0	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18.6	0.55.0 1.25.13
quay.io/minio/minio :RELEASE.2022-09-17T00-09-45Z	c3d20bc2ea08	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591 stdlib@go1.18.6	0.55.0 1.25.13
quay.io/prometheus-operator/prometheus-config-reloader :v0.74.0	d55631c7a740	golang.org/x/net@v0.25.0 stdlib@go1.22.3	0.55.0 1.25.13
quay.io/prometheus/alertmanager :v0.27.0	e13b6ed5cb92	golang.org/x/net@v0.20.0 stdlib@go1.21.7	0.55.0 1.25.13
quay.io/prometheus/node-exporter :v1.8.1	fa7fa12a57ef	golang.org/x/net@v0.23.0 stdlib@go1.22.3	0.55.0 1.25.13
quay.io/prometheus/prometheus :v2.53.1	f20d3127bf28	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.55.0 1.25.13
quay.io/prometheuscommunity/postgres-exporter :latest	ac5ec343104f	stdlib@go1.26.4	1.25.13
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.12.0	b401fae262a5	golang.org/x/net@v0.22.0 stdlib@go1.21.8	0.55.0 1.25.13

Open the chart page →

24,967

convertigoconvertigo

8.4.3

1 of 5 See more

convertigo convertigo 8.4.3

1 of the 5 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
baserow/baserow :1.30.1	df0c42eb67e8	golang.org/x/net@v0.17.0 stdlib@go1.21.5	0.55.0 1.25.13

Open the chart page →

17,755

core-dump-handlercore-dump-handler

9.0.0

1 of 1 See more

core-dump-handler core-dump-handler 9.0.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
quay.io/icdh/core-dump-handler :v9.0.0	cc79b9e2a1c8	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.16.6	0.55.0 1.25.13

Open the chart page →

3,089

cosmocosmo-platform

0.20.0

6 of 10 See more

cosmo cosmo-platform 0.20.0

6 of the 10 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
bitnamilegacy/minio :2025.7.23-debian-12-r5	6dabb4a2088c	golang.org/x/net@v0.39.0 stdlib@go1.24.6	0.55.0 1.25.13
bitnamilegacy/redis :7.2.4-debian-12-r16	70cafc5a71e8	stdlib@go1.21.10	1.25.13
ghcr.io/wundergraph/cosmo/controlplane :0.133.1	49800ff775f3	golang.org/x/net@v0.25.0 stdlib@go1.22.3	0.55.0 1.25.13
ghcr.io/wundergraph/cosmo/graphqlmetrics :0.33.0	efb69ec3330c	golang.org/x/net@v0.33.0 stdlib@go1.23.6	0.55.0 1.25.13
ghcr.io/wundergraph/cosmo/otelcollector :0.18.1	5a6fe78d4d15	golang.org/x/net@v0.26.0 stdlib@go1.23.6	0.55.0 1.25.13
ghcr.io/wundergraph/cosmo/studio :0.111.0	454f4384713a	stdlib@go1.20.7	1.25.13

Open the chart page →

29,691

dapr-dashboarddapr

0.15.0

1 of 1 See more

dapr-dashboard dapr 0.15.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
daprio/dashboard :0.15.0	4be696707bd1	golang.org/x/net@v0.25.0 stdlib@go1.21.13	0.55.0 1.25.13

Open the chart page →

1,322

deepflowdeepflow

6.2.201

2 See more

deepflow deepflow 6.2.201

2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
deepflowce/clickhouse-server :22.8.6.71	bc1882f75c18	stdlib@go1.18.3	1.25.13
deepflowce/mysql :8.0.31	3d7ae561cf60	stdlib@go1.16.7	1.25.13

Open the chart page →

—

defensia-agentdefensia-agent

0.6.0

1 of 1 See more

defensia-agent defensia-agent 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/defensia/agent :1.4.57	e9d40ae44711	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

hoppscotchdeliveryhero

0.3.2

1 of 1 See more

hoppscotch deliveryhero 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
hoppscotch/hoppscotch :2024.8.2	f1da831950b7	golang.org/x/net@v0.17.0 stdlib@go1.21.10	0.55.0 1.25.13

Open the chart page →

3,480

kube-benchdeliveryhero

0.1.17

1 of 1 See more

kube-bench deliveryhero 0.1.17

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
aquasec/kube-bench :v0.8.0	ea3e33bc3c4e	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.55.0 1.25.13

Open the chart page →

1,624

listmonkdeliveryhero

0.1.12

1 of 1 See more

listmonk deliveryhero 0.1.12

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
listmonk/listmonk :v2.1.0	d2eac77ddfad	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.6	0.55.0 1.25.13

Open the chart page →

2,538

prometheus-locust-exporterdeliveryhero

1.2.3

1 of 1 See more

prometheus-locust-exporter deliveryhero 1.2.3

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
containersol/locust_exporter :v0.4.1	a914972d19ad	stdlib@go1.15.8	1.25.13

Open the chart page →

1,277

distrdistr

4.0.3

1 of 4 See more

410

zabbix-kubernetes-discoverydjerfy

1.4.20

1 of 1 See more

zabbix-kubernetes-discovery djerfy 1.4.20

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/djerfy/zabbix-kubernetes-discovery :v1.4.20	7a50c07e7c69	stdlib@go1.23.1	1.25.13

Open the chart page →

4,236

navidromedjjudas21

6.8.4

1 of 1 See more

navidrome djjudas21 6.8.4

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
deluan/navidrome :0.63.1	7c43af9f6516	stdlib@go1.26.5	1.25.13

Open the chart page →

160

bscdysnix

0.6.59

1 of 4 See more

bsc dysnix 0.6.59

1 of the 4 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/bnb-chain/bsc :1.6.2	fd0e3ec7d960	golang.org/x/net@v0.38.0 stdlib@go1.24.9	0.55.0 1.25.13

Open the chart page →

2,316

element-callelement-call

0.1.44

1 of 2 See more

element-call element-call 0.1.44

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/element-hq/lk-jwt-service :0.6.0	822f0c03a3bd	stdlib@go1.26.4	1.25.13

Open the chart page →

163

imagepullsecret-patcherempathyco

1.0.0

1 of 1 See more

imagepullsecret-patcher empathyco 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
quay.io/titansoft/imagepullsecret-patcher :v0.14	21e6d6a155dc	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.15	0.55.0 1.25.13

Open the chart page →

2,272

postgres-pgdump-backupeugen

0.7.6

1 of 1 See more

postgres-pgdump-backup eugen 0.7.6

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
traefik/whoami :v1.11.0	200689790a0a	stdlib@go1.24.1	1.25.13

Open the chart page →

353

openshift-secured-appeximiait

0.5.0

1 of 1 See more

openshift-secured-app eximiait 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-oauth-proxy :4.14	a7dff785d821	golang.org/x/net@v0.17.0 stdlib@go1.20.10	0.55.0 1.25.13

Open the chart page →

12,059

openshift-secured-pgadmineximiait

0.2.0

1 of 2 See more

openshift-secured-pgadmin eximiait 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-oauth-proxy :4.14	a7dff785d821	golang.org/x/net@v0.17.0 stdlib@go1.20.10	0.55.0 1.25.13

Open the chart page →

14,562

openshift-secured-redisInsighteximiait

0.9.2

1 of 2 See more

openshift-secured-redisInsight eximiait 0.9.2

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-oauth-proxy :4.14	a7dff785d821	golang.org/x/net@v0.17.0 stdlib@go1.20.10	0.55.0 1.25.13

Open the chart page →

13,891

keydbfinkinfridom

0.48.3

1 of 1 See more

keydb finkinfridom 0.48.3

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
eqalpha/keydb :x86_64_v6.3.4	eceb1806730c	stdlib@go1.16.7	1.25.13

Open the chart page →

5,324

flyte-binaryflyte

2.0.49

1 of 4 See more

flyte-binary flyte 2.0.49

1 of the 4 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/postgres :15-alpine	a46e076249ce	stdlib@go1.24.6	1.25.13

Open the chart page →

4,004

flyte-coreflyte

2.0.49

1 of 3 See more

flyte-core flyte 2.0.49

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/postgres :15-alpine	a46e076249ce	stdlib@go1.24.6	1.25.13

Open the chart page →

416

frp-operatorfrp

1.0.4

1 of 1 See more

frp-operator frp 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/aureum-cloud/frp-operator :v1.0.1	96b01d7e7025	golang.org/x/net@v0.38.0 stdlib@go1.24.13	0.55.0 1.25.13

Open the chart page →

382

frp-operatorfrp-operator

1.9.0

1 of 1 See more

frp-operator frp-operator 1.9.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/zufardhiyaulhaq/frp-operator :v0.11.0	cd25ee354df2	golang.org/x/net@v0.23.0 stdlib@go1.23.12	0.55.0 1.25.13

Open the chart page →

542

ascii-moviegabe565

0.16.4

1 of 1 See more

ascii-movie gabe565 0.16.4

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/gabe565/ascii-movie :1.9.6	27f85bb98da3	stdlib@go1.24.0	1.25.13

Open the chart page →

1,133

domain-watchgabe565

1.1.0

1 of 1 See more

domain-watch gabe565 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/gabe565/domain-watch :latest	34c5a1e351d6	golang.org/x/net@v0.36.0 stdlib@go1.24.1	0.55.0 1.25.13

Open the chart page →

935

blockygeek-cookbook

10.5.2

1 of 1 See more

blocky geek-cookbook 10.5.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/0xerr0r/blocky :v0.18	b15824464acb	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.7	0.55.0 1.25.13

Open the chart page →

3,036

error-pagesgeek-cookbook

1.2.2

1 of 1 See more

error-pages geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/tarampampam/error-pages :2.6.0	13e73da04ee4	stdlib@go1.17.6	1.25.13

Open the chart page →

1,111

intel-gpu-plugingeek-cookbook

4.4.2

1 of 1 See more

intel-gpu-plugin geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
intel/intel-gpu-plugin :0.20.0	143f0a45e174	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.10	0.55.0 1.25.13

Open the chart page →

1,745

mealiegeek-cookbook

5.1.2

1 of 2 See more

mealie geek-cookbook 5.1.2

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
hkotel/mealie :frontend-v1.0.0beta-2	3c04c0e85039	golang.org/x/net@v0.0.0-20210913180222-943fd674d43e stdlib@go1.17.10	0.55.0 1.25.13

Open the chart page →

7,636

multusgeek-cookbook

3.5.2

2 of 3 See more

multus geek-cookbook 3.5.2

2 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/cni-plugins :v0.9.1	241592d93640	stdlib@go1.15.8	1.25.13
ghcr.io/k8snetworkplumbingwg/multus-cni :v3.7.1	e72aa733faf2	golang.org/x/net@v0.0.0-20201021035429-f5854403a974 stdlib@go1.13.10	0.55.0 1.25.13

Open the chart page →

4,916

plexgeek-cookbook

6.4.3

1 of 1 See more

plex geek-cookbook 6.4.3

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/plex :v1.28.0.5999-97678ded3	ef756c7d784b	stdlib@go1.18.4	1.25.13

Open the chart page →

9,849

signal-cli-rest-apigeek-cookbook

1.2.2

1 of 1 See more

signal-cli-rest-api geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
bbernhard/signal-cli-rest-api :0.57	549ad08d7e14	golang.org/x/net@v0.0.0-20200625001655-4c5254603344 stdlib@go1.17.8	0.55.0 1.25.13

Open the chart page →

10,295

smarter-device-managergeek-cookbook

6.5.2

1 of 1 See more

smarter-device-manager geek-cookbook 6.5.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
registry.gitlab.com/arm-research/smarter/smarter-device-manager :v1.20.7	864fc338571e	golang.org/x/net@v0.0.0-20210510120150-4163338589ed stdlib@go1.16.4	0.55.0 1.25.13

Open the chart page →

2,337

statpinggeek-cookbook

6.2.0

1 of 2 See more

statping geek-cookbook 6.2.0

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
statping/statping :v0.90.74	e874da513a5c	golang.org/x/net@v0.0.0-20200904194848-62affa334b73 stdlib@go1.14.13	0.55.0 1.25.13

Open the chart page →

3,379

syncthinggeek-cookbook

3.5.2

1 of 1 See more

syncthing geek-cookbook 3.5.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
syncthing/syncthing :1.18.2	966433161272	golang.org/x/net@v0.0.0-20210716203947-853a461950ff stdlib@go1.17	0.55.0 1.25.13

Open the chart page →

2,611

tautulligeek-cookbook

11.4.2

1 of 1 See more

tautulli geek-cookbook 11.4.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/tautulli :v2.7.7	4ea617c30397	stdlib@go1.16.7	1.25.13

Open the chart page →

10,865

traefik-forward-authgeek-cookbook

2.2.2

1 of 1 See more

traefik-forward-auth geek-cookbook 2.2.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
thomseddon/traefik-forward-auth :2.2.0	e875194d67e2	golang.org/x/net@v0.0.0-20190930134127-c5a3c61f89f3 stdlib@go1.13.12	0.55.0 1.25.13

Open the chart page →

2,235

unifigeek-cookbook

5.1.3

1 of 1 See more

unifi geek-cookbook 5.1.3

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
jacobalberty/unifi :v7.4.162	b3edc809a3ff	stdlib@go1.20.4	1.25.13

Open the chart page →

11,977

ghost-on-kubernetesghost-on-kubernetes-helm

1.1.2

1 of 3 See more

ghost-on-kubernetes ghost-on-kubernetes-helm 1.1.2

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/mysql :8.4	85b9bf2e29cf	stdlib@go1.24.6	1.25.13

Open the chart page →

1,489

gitlab-runnergitlab-jh

0.93.0

1 of 1 See more

gitlab-runner gitlab-jh 0.93.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
registry.gitlab.com/gitlab-org/gitlab-runner :alpine-v19.4.0	a4838319e55b	golang.org/x/net@v0.54.0 stdlib@go1.26.5	0.55.0 1.25.13

Open the chart page →

280

gitvotegitvote

1.5.0

2 of 6 See more

gitvote gitvote 1.5.0

2 of the 6 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
artifacthub/postgres :latest	4fd34fa635cc	stdlib@go1.24.6	1.25.13
ghcr.io/cncf/gitvote/dbmigrator :v1.5.0	f1e7efe440da	stdlib@go1.25.3	1.25.13

Open the chart page →

5,683

etcdgroundhog2k

1.1.12

1 of 2 See more

etcd groundhog2k 1.1.12

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
quay.io/coreos/etcd :v3.7.1	3c66a5191d37	stdlib@go1.26.5	1.25.13

Open the chart page →

143

Container images carrying it

5,284 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/chaos-mesh/chaos-mesh :v2.8.4	9e48285bb44c	golang.org/x/net@v0.52.0 stdlib@go1.25.11	0.55.0 1.25.13	1
ghcr.io/chaos-mesh/chaos-mesh :v2.8.3	bdb31f3121a2	golang.org/x/net@v0.52.0 stdlib@go1.25.11	0.55.0 1.25.13	1
ghcr.io/chatwoot/pgvector :14.4.0-debian-11-r0	f759f1510d09	stdlib@go1.16.7	1.25.13	1
ghcr.io/chilledornaments/redirector :latest	94d48447d967	stdlib@go1.26.4	1.25.13	1
ghcr.io/chmouel/gosmee :v0.32.0	60b8db1f68cc	stdlib@go1.26.5	1.25.13	1
ghcr.io/chronicleprotocol/challenger-go :0.1.2	c8d5a3c0e966	stdlib@go1.22.12	1.25.13	1
ghcr.io/chronicleprotocol/ghost :0.78.5	951d71162065	stdlib@go1.26.5	1.25.13	1
ghcr.io/chronicleprotocol/gofer :0.61	3915d2e41e04	golang.org/x/net@v0.38.0 stdlib@go1.24.6	0.55.0 1.25.13	1
ghcr.io/chronicleprotocol/oracles-updates-exporter :0.0.4	992d0e793af6	stdlib@go1.19.13	1.25.13	1
ghcr.io/chronicleprotocol/spectre :0.68.3	4e872bc016e8	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.55.0 1.25.13	1
ghcr.io/chronicleprotocol/spire :0.68.3	79df4fb20322	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.55.0 1.25.13	1
ghcr.io/chrxmvtik/gitlab-mr-conform :0.5.2	b2eb79fc99cb	golang.org/x/net@v0.51.0 stdlib@go1.25.9	0.55.0 1.25.13	1
ghcr.io/cisco-open/cluster-registry-controller :v0.2.12	937eff91df1e	golang.org/x/net@v0.7.0 stdlib@go1.18	0.55.0 1.25.13	1
ghcr.io/ckotzbauer/access-manager	dd584fcda0ff	golang.org/x/net@v0.22.0 stdlib@go1.22.1	0.55.0 1.25.13	1
ghcr.io/ckotzbauer/chekr	f299baf467b5	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.17.3	0.55.0 1.25.13	1
ghcr.io/ckotzbauer/vulnerability-operator :0.28.16	7008df32715c	stdlib@go1.26.4	1.25.13	1
ghcr.io/clastix/kamaji-console :v0.2.1	29ecf8d4fa65	golang.org/x/net@v0.23.0 stdlib@go1.23.7	0.55.0 1.25.13	1
ghcr.io/cleanuparr/cleanuparr :2.10.6	8136c3beda7a	stdlib@go1.22.2	1.25.13	1
ghcr.io/clickhouse/clickhouse-operator :v0.0.7	d51ca53f0967	stdlib@go1.26.5	1.25.13	1
ghcr.io/cloudeteer/m365-exporter :3.9.3	a13a11fe9558	stdlib@go1.26.5	1.25.13	1
ghcr.io/cloudflare/ebpf_exporter :v2.3.0	75370b2ec2bb	stdlib@go1.21.5	1.25.13	1
ghcr.io/cloudfoundry-incubator/quarks-job :v1.0.213	760eee87f839	golang.org/x/net@v0.0.0-20200625001655-4c5254603344 stdlib@go1.14.7	0.55.0 1.25.13	1
ghcr.io/cloudfoundry-incubator/quarks-operator :v7.0.1-0.g5396b11	6a1432b0d503	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0 stdlib@go1.13.15	0.55.0 1.25.13	1
ghcr.io/cloudfoundry-incubator/quarks-secret :v1.0.754	f059af4de8ed	golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7 stdlib@go1.14.7	0.55.0 1.25.13	1
ghcr.io/cloudfoundry-incubator/quarks-statefulset :v0.0.1304-g4b4f2ac5	c7c70b527255	golang.org/x/net@v0.0.0-20200625001655-4c5254603344 stdlib@go1.14.7	0.55.0 1.25.13	1
ghcr.io/cloudfoundry-incubator/quarks-statefulset :v0.0.1308-g6a8b2220	e24a9e0a21b6	golang.org/x/net@v0.0.0-20200625001655-4c5254603344 stdlib@go1.14.7	0.55.0 1.25.13	1
ghcr.io/cloudnative-pg/cloudnative-pg :1.28.0	34198e85b6e6	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.55.0 1.25.13	1
ghcr.io/cloudnative-pg/cloudnative-pg :1.17.1	4dd365800b62	golang.org/x/net@v0.0.0-20221002022538-bcab6841153b stdlib@go1.18.6	0.55.0 1.25.13	1
ghcr.io/cloudnative-pg/cloudnative-pg :1.21.1	9f707d91de1c	golang.org/x/net@v0.17.0 stdlib@go1.21.3	0.55.0 1.25.13	1
ghcr.io/cloudnative-pg/cloudnative-pg :1.30.0	a2701eb97cdd	stdlib@go1.26.4	1.25.13	1
ghcr.io/cloudnative-pg/plugin-barman-cloud :v0.15.0	563c680fe7fd	stdlib@go1.26.4	1.25.13	1
ghcr.io/cloudnative-pg/postgresql :14.5	b3b30d04b362	stdlib@go1.16.7	1.25.13	1
ghcr.io/cloudquery/cloudquery :6.40.0	40b804fce7f9	stdlib@go1.26.4	1.25.13	1
ghcr.io/cloudscript-technology/dumpscript :v0.0.42-alpine-edge	fce5b6fd161c	golang.org/x/net@v0.47.0 stdlib@go1.26.2	0.55.0 1.25.13	1
ghcr.io/cloudscript-technology/k8s-monitoring-app :v0.0.25	cab66a6b3574	golang.org/x/net@v0.38.0 stdlib@go1.24.10	0.55.0 1.25.13	1
ghcr.io/cloudtty/cloudshell :v0.8.10	23e8d178e02c	golang.org/x/net@v0.45.0 stdlib@go1.25.2	0.55.0 1.25.13	1
ghcr.io/cloudtty/cloudshell-operator :v0.8.10	14f036e33ef1	golang.org/x/net@v0.25.0 stdlib@go1.21.11	0.55.0 1.25.13	1
ghcr.io/clusternet/clusternet-controller-manager :v1.0.0	2ce077d3d02d	golang.org/x/net@v0.42.0 stdlib@go1.23.8	0.55.0 1.25.13	1
ghcr.io/clusternet/clusternet-hub :v1.0.0	59f75504c5d4	golang.org/x/net@v0.42.0 stdlib@go1.23.8	0.55.0 1.25.13	1
ghcr.io/clusternet/clusternet-scheduler :v1.0.0	a6ae5aff81ce	golang.org/x/net@v0.42.0 stdlib@go1.23.8	0.55.0 1.25.13	1
ghcr.io/clusterpedia-io/clusterpedia/apiserver :v0.6.0	3d089d9078f8	stdlib@go1.19.4	1.25.13	1
ghcr.io/clusterpedia-io/clusterpedia/clustersynchro-manager :v0.6.0	82cc9a77f6d6	stdlib@go1.19.4	1.25.13	1
ghcr.io/clusterpedia-io/clusterpedia/controller-manager :v0.6.0	81669df338e0	stdlib@go1.19.4	1.25.13	1
ghcr.io/cmacrae/kove :v0.2.0	185bfaae750c	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.17	0.55.0 1.25.13	1
ghcr.io/cmacrae/kove :v0.1.0	db1244edefc8	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.16	0.55.0 1.25.13	1
ghcr.io/cncf/clowarden/dbmigrator :v0.2.3	c022fd42de45	stdlib@go1.25.3	1.25.13	1
ghcr.io/cncf/gitvote/dbmigrator :v1.5.0	f1e7efe440da	stdlib@go1.25.3	1.25.13	1
ghcr.io/cobbler/cobbler-tftp :v0.1.0a7	fef3ca80baa4	stdlib@go1.25.10	1.25.13	1
ghcr.io/cohdi/composable-dra-driver :v0.2.2	8c05f7366981	golang.org/x/net@v0.54.0 stdlib@go1.26.4	0.55.0 1.25.13	1
ghcr.io/cohdi/composable-resource-operator :v0.2.2	3f45bf0a1bc0	stdlib@go1.26.5	1.25.13	1