StackRadar

CVE-2026-39821

High

Advisory

Published 22 May 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.2
base score, highest
EPSS
0.007
51st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
4,643
of 17,821 indexed, latest versions
Container images
5,380
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: git-lfs security update

Carried by container images the latest versions of 4,643 of 17,821 indexed charts deploy, on 5,380 images.

Affected packageAffected versionsFixed inImages
git-lfsrpm2.13.3-3.el8_60:3.4.1-11.el8_101
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+193 more1.25.135,337
golang.org/x/netgolangv0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+220 more0.55.03,758
OSV records
RHSA-2026:30853GO-2026-5026

Charts affected

4,643 by stars
ChartLatestAffected imagesRadar Score
consolestratosVerified publisher4.4.01 of 4See more

console stratos 4.4.0

1 of the 4 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
splatform/stratos-jetstream:4.4.0-bc65c315c886311c331b9
golang.org/x/net@v0.0.0-20200822124328-c89045814202
stdlib@go1.13.4
0.55.0
1.25.13

Open the chart page →

22,735
stunner-gateway-operatorstunner1.1.02 of 2See more

stunner-gateway-operator stunner 1.1.0

2 of the 2 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
l7mp/stunner-auth-server:1.1.02f8114477ba6
golang.org/x/net@v0.36.0
stdlib@go1.23.8
0.55.0
1.25.13
l7mp/stunner-gateway-operator:1.1.0c34f7c931491
golang.org/x/net@v0.36.0
stdlib@go1.23.8
0.55.0
1.25.13

Open the chart page →

1,300
hlf-k8ssubstraVerified publisher10.2.44 of 7See more

hlf-k8s substra 10.2.4

4 of the 7 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
hyperledger/fabric-ca:1.5.0f270dfeee91d
golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0
stdlib@go1.15.7
0.55.0
1.25.13
jwilder/dockerize:latestf94fb59fb4f6
golang.org/x/net@v0.47.0
stdlib@go1.25.5
0.55.0
1.25.13
ghcr.io/substra/fabric-peer:0.2.4f681e0343a31
golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110
stdlib@go1.18.10
0.55.0
1.25.13
ghcr.io/substra/fabric-tools:0.2.43491a0f31c4a
golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110
stdlib@go1.18.10
0.55.0
1.25.13

Open the chart page →

12,035
supabasesupabse0.8.04 of 11See more

supabase supabse 0.8.0

4 of the 11 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
darthsim/imgproxy:v3.30.13b709e4a0e5e
golang.org/x/net@v0.44.0
stdlib@go1.25.1
0.55.0
1.25.13
library/postgres:17-alpinef02121de6f74
stdlib@go1.24.6
1.25.13
supabase/gotrue:v2.189.0385184459f57
golang.org/x/net@v0.52.0
stdlib@go1.25.8
0.55.0
1.25.13
supabase/postgres:17.6.1.136f371b5f3f2ac
stdlib@go1.26.1
1.25.13

Open the chart page →

17,986
Grafanasurajwarbhe-grafana0.1.01 of 1See more

Grafana surajwarbhe-grafana 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
surajwarbhe/grafana:v185248611e9f1
golang.org/x/net@v0.0.0-20200202094626-16171245cfb2
stdlib@go1.14.3
0.55.0
1.25.13

Open the chart page →

2,605
switchboardswitchboardVerified publisher0.7.41 of 1See more

switchboard switchboard 0.7.4

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/borchero/switchboard:0.7.454a193b757da
golang.org/x/net@v0.51.0
stdlib@go1.26.1
0.55.0
1.25.13

Open the chart page →

872
hello-appsysintelligentVerified publisher2.0.11 of 1See more

hello-app sysintelligent 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
sysintelligent/hello-app:2.0.177fb30df847d
golang.org/x/net@v0.19.0
stdlib@go1.19.3
0.55.0
1.25.13

Open the chart page →

1,881
system-upgrade-controllersystem-upgradeVerified publisher0.2.131 of 1See more

system-upgrade-controller system-upgrade 0.2.13

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
rancher/system-upgrade-controller:v0.20.1aaf4dbf64057
golang.org/x/net@v0.53.0
stdlib@go1.26.5
0.55.0
1.25.13

Open the chart page →

125
system-upgrade-controllersystem-upgrade-controllerVerified publisher1.12.01 of 1See more

system-upgrade-controller system-upgrade-controller 1.12.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
rancher/system-upgrade-controller:v0.20.1aaf4dbf64057
golang.org/x/net@v0.53.0
stdlib@go1.26.5
0.55.0
1.25.13

Open the chart page →

125
headscaleszpadel-chartsVerified publisher0.30.22 of 3See more

headscale szpadel-charts 0.30.2

2 of the 3 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/juanfont/headscale:0.29.18453e47ea6bf
stdlib@go1.26.4
1.25.13
ghcr.io/tale/headplane:0.6.39476cc5adb12
golang.org/x/net@v0.42.0
stdlib@go1.25.1
0.55.0
1.25.13

Open the chart page →

1,748
tekton-events-relaytekton-events-relayVerified publisher0.10.11 of 1See more

tekton-events-relay tekton-events-relay 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/fabioluciano/tekton-events-relay:0.10.184cb5a2b8b81
stdlib@go1.26.4
1.25.13

Open the chart page →

296
tenuretenureVerified publisher1.0.62 of 2See more

tenure tenure 1.0.6

2 of the 2 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
mongodb/mongodb-atlas-local:8e118f5c131c5
stdlib@go1.26.5
1.25.13
tenureai/tenure:v1.0.285f5b222df9a5
stdlib@go1.26.2
1.25.13

Open the chart page →

2,411
terraform-controllerterraform-controller0.0.201 of 1See more

terraform-controller terraform-controller 0.0.20

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
absaoss/terraform-controller:v0.0.20ad538a1285a0
golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7
stdlib@go1.14.8
0.55.0
1.25.13

Open the chart page →

3,539
jenkinstestchart0.1.91 of 2See more

jenkins testchart 0.1.9

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
golang.org/x/net@v0.7.0
stdlib@go1.20.6
0.55.0
1.25.13

Open the chart page →

9,069
jenkinstest-jenkins9.1.01 of 2See more

jenkins test-jenkins 9.1.0

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
golang.org/x/net@v0.7.0
stdlib@go1.20.6
0.55.0
1.25.13

Open the chart page →

9,069
base-clusterteuto-netVerified publisher12.4.01 of 1See more

base-cluster teuto-net 12.4.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
registry.k8s.io/kubectl:1.33.4261a9ed843eb
golang.org/x/net@v0.38.0
stdlib@go1.24.5
0.55.0
1.25.13

Open the chart page →

437
tocktock0.6.31 of 9See more

tock tock 0.6.3

1 of the 9 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:7.0.5-debian-11-r66fe59ed5d79f
golang.org/x/net@v0.19.0
stdlib@go1.20.12
0.55.0
1.25.13

Open the chart page →

13,745
goalerttokens-studioVerified publisher0.0.51 of 2See more

goalert tokens-studio 0.0.5

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
goalert/goalert:v0.32.008d57388b0cb
golang.org/x/net@v0.20.0
stdlib@go1.22.1
0.55.0
1.25.13

Open the chart page →

1,477
tor-snowflake-proxytor-snowflake-proxyVerified publisher1.2.01 of 1See more

tor-snowflake-proxy tor-snowflake-proxy 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
thetorproject/snowflake-proxy:v2.11.01ddc5069d354
golang.org/x/net@v0.35.0
stdlib@go1.23.7
0.55.0
1.25.13

Open the chart page →

740
spa-reloadertoucanVerified publisher0.1.01 of 1See more

spa-reloader toucan 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
toucansoftware/spa-reloader:latestc187b1fba501
golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7
stdlib@go1.13.15
0.55.0
1.25.13

Open the chart page →

2,246
traefik-hubtraefikOfficialVerified publisher4.2.01 of 1See more

traefik-hub traefik 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/traefik/traefik-hub:v2.11.0322f5f8cc105
golang.org/x/net@v0.17.0
stdlib@go1.21.8
0.55.0
1.25.13

Open the chart page →

3,194
starboard-operatortrivy-operator0.10.251 of 1See more

starboard-operator trivy-operator 0.10.25

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
aquasec/starboard-operator:0.15.38e0b1c7ddc843
golang.org/x/net@v0.41.0
stdlib@go1.26.3
0.55.0
1.25.13

Open the chart page →

320
atlantistrozz3.12.111 of 1See more

atlantis trozz 3.12.11

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
runatlantis/atlantis:v0.16.145fbaf7e207c
golang.org/x/net@v0.0.0-20191027093000-83d349e8ac1a
stdlib@go1.14.7
0.55.0
1.25.13

Open the chart page →

5,288
guardrails-agent-kubernetesturbotVerified publisher0.3.01 of 1See more

guardrails-agent-kubernetes turbot 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/turbot/guardrails-agent-kubernetes:0.3.09d01bf9c9224
golang.org/x/net@v0.26.0
stdlib@go1.22.8
0.55.0
1.25.13

Open the chart page →

4,105
tyk-operatortyk-helm1.4.21 of 1See more

tyk-operator tyk-helm 1.4.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
tykio/tyk-operator:v1.4.2e13d37f298b7
stdlib@go1.25.12
1.25.13

Open the chart page →

148
boundaryundergridVerified publisher0.1.02 of 3See more

boundary undergrid 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
groundnuty/k8s-wait-for:v1.684edcf796267
stdlib@go1.18.1
1.25.13
hashicorp/boundary:0.8.1fb70bd9210ff
golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd
stdlib@go1.17.10
0.55.0
1.25.13

Open the chart page →

4,967
u-storeunifieVerified publisher1.2.01 of 1See more

u-store unifie 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
public.ecr.aws/g4a0y2u8/unifie-store:staging-19925a2057fabc948
stdlib@go1.20.12
1.25.13

Open the chart page →

15,342
taigaunxwaresVerified publisher2026.3.82 of 6See more

taiga unxwares 2026.3.8

2 of the 6 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
taigaio/taiga-back:latest4beed8f62c9f
stdlib@go1.24.4
1.25.13
taigaio/taiga-protected:latestfd4568a97a59
stdlib@go1.24.4
1.25.13

Open the chart page →

9,103
upbot-operatorupbot-operator0.0.202 of 2See more

upbot-operator upbot-operator 0.0.20

2 of the 2 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
alpine/k8s:1.28.13e5c0b053fed7
golang.org/x/net@v0.12.0
stdlib@go1.22.5
0.55.0
1.25.13
ghcr.io/upbothq/upbot-operator:v0.0.20e5da24947c91
golang.org/x/net@v0.38.0
stdlib@go1.24.9
0.55.0
1.25.13

Open the chart page →

4,488
user-componentuser-component1.2.01 of 4See more

user-component user-component 1.2.0

1 of the 4 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/user-component-php:latest198db44fabb5
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
stdlib@go1.13.10
0.55.0
1.25.13

Open the chart page →

7,315
user-manager-serveruser-manager-server1.27.11 of 1See more

user-manager-server user-manager-server 1.27.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/user-manager-server:1.27.1628a14449241
golang.org/x/net@v0.38.0
stdlib@go1.23.12
0.55.0
1.25.13

Open the chart page →

757
phonebook-chartusuladamsVerified publisher0.1.51 of 3See more

phonebook-chart usuladams 0.1.5

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
stdlib@go1.18.2
1.25.13

Open the chart page →

3,179
v2ray-proxyv2ray-proxy0.2.41 of 1See more

v2ray-proxy v2ray-proxy 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
pinclr/v2ray-proxy:latestf37f250b7091
golang.org/x/net@v0.7.0
stdlib@go1.20.2
0.55.0
1.25.13

Open the chart page →

1,962
vault-gcp-secretsvault-gcp-secrets1.19.51 of 1See more

vault-gcp-secrets vault-gcp-secrets 1.19.5

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/tjm/vault-gcp-secrets:v1.19.59f157fe035f1
golang.org/x/net@v0.40.0
stdlib@go1.24.3
0.55.0
1.25.13

Open the chart page →

2,448
vearchvearch3.3.42 of 4See more

vearch vearch 3.3.4

2 of the 4 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
prom/prometheus:v2.13.10a8caa2e9f19
golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80
stdlib@go1.13.1
0.55.0
1.25.13
vearch/vearch:3.3.40768af33f9d9
golang.org/x/net@v0.10.0
stdlib@go1.19.9
0.55.0
1.25.13

Open the chart page →

5,022
devportal-admin-uiveecode-platformVerified publisher0.5.41 of 1See more

devportal-admin-ui veecode-platform 0.5.4

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
veecode/devportal-admin-ui:0.4.30c69fd286b489
golang.org/x/net@v0.23.0
stdlib@go1.22.3
0.55.0
1.25.13

Open the chart page →

5,213
victoria-logs-clustervictoriametricsVerified publisher0.2.81 of 1See more

victoria-logs-cluster victoriametrics 0.2.8

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
victoriametrics/victoria-logs:v1.52.047b820890d64
stdlib@go1.26.5
1.25.13

Open the chart page →

60
victoria-traces-clustervictoriametricsVerified publisher0.2.101 of 1See more

victoria-traces-cluster victoriametrics 0.2.10

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
victoriametrics/victoria-traces:v0.11.09947b14b6b9b
stdlib@go1.26.5
1.25.13

Open the chart page →

56
riveruivirtualrootVerified publisher0.1.31 of 1See more

riverui virtualroot 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/riverqueue/riverui:0.5.32dc54179b25a
golang.org/x/net@v0.23.0
stdlib@go1.23.0
0.55.0
1.25.13

Open the chart page →

1,135
go-egvoid-xmh1.1.13 of 3See more

go-eg void-xmh 1.1.1

3 of the 3 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
voidxmh/xmh-auther:v193e42a569ca8
stdlib@go1.16.5
1.25.13
voidxmh/xmh-cacher:v11b7397412320
stdlib@go1.16.5
1.25.13
voidxmh/xmh-ui:v12ff3f2146547
stdlib@go1.16.5
1.25.13

Open the chart page →

7,467
phpipamvquieVerified publisher1.0.31 of 3See more

phpipam vquie 1.0.3

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
library/mariadb:10.11.21c33370a599c
stdlib@go1.16.7
1.25.13

Open the chart page →

7,098
vultr-ccmvultrVerified publisher1.3.01 of 1See more

vultr-ccm vultr 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
vultr/vultr-cloud-controller-manager:v0.3.01806f17d620c
golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7
stdlib@go1.16.7
0.55.0
1.25.13

Open the chart page →

3,042
waardepapierenwaardepapieren1.0.01 of 3See more

waardepapieren waardepapieren 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/waardepapieren-php:latestb2666ffcbad8
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
stdlib@go1.13.10
0.55.0
1.25.13

Open the chart page →

8,090
waardepapieren-baliewaardepapieren-balie1.0.01 of 3See more

waardepapieren-balie waardepapieren-balie 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/waardepapieren-balie-php:latestf36c423cd259
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
stdlib@go1.13.10
0.55.0
1.25.13

Open the chart page →

7,882
waardepapieren-registerwaardepapieren-register1.1.01 of 4See more

waardepapieren-register waardepapieren-register 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/waardepapieren-register-php:latest9affab218351
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
stdlib@go1.13.10
0.55.0
1.25.13

Open the chart page →

7,442
wachdwachdVerified publisher0.4.371 of 1See more

wachd wachd 0.4.37

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/wachd/wachd:0.4.1805b05c56da94
stdlib@go1.25.10
1.25.13

Open the chart page →

1,275
waldurwaldur-chartsVerified publisher8.1.21 of 3See more

waldur waldur-charts 8.1.2

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
library/postgres:17f4c66b820c6f
stdlib@go1.24.6
1.25.13

Open the chart page →

4,599
azure-metrics-exporterwebdevopsVerified publisher1.2.111 of 1See more

azure-metrics-exporter webdevops 1.2.11

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
webdevops/azure-metrics-exporter:25.12.01d3b453fba99
golang.org/x/net@v0.48.0
stdlib@go1.25.5
0.55.0
1.25.13

Open the chart page →

509
webhookswebhooks0.1.51 of 1See more

webhooks webhooks 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/thecatlady/webhook:2.8.0f04718704dab
stdlib@go1.20.1
1.25.13

Open the chart page →

2,032
webhook-testerwebhook-testerVerified publisher2.3.01 of 1See more

webhook-tester webhook-tester 2.3.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/tarampampam/webhook-tester:2.3.085818267b450
golang.org/x/net@v0.38.0
stdlib@go1.26.2
0.55.0
1.25.13

Open the chart page →

217

Container images carrying it

5,380 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/ethpandaops/benchmarkoor:latest5470b2ec3161
stdlib@go1.24.13
1.25.13
1
ghcr.io/ethpandaops/dispatchoor-api:latesta0b272f6682a
golang.org/x/net@v0.47.0
stdlib@go1.24.13
0.55.0
1.25.13
1
ghcr.io/ethpandaops/syncoor:master233aa9808fc7
stdlib@go1.26.5
1.25.13
1
ghcr.io/eugenmayer/whatsmyip:0.0.14b6700cc0e2d
stdlib@go1.22.1
1.25.13
1
ghcr.io/eugenmayer/whoami-tls:0.1.0477be2d05aba
stdlib@go1.24.1
1.25.13
1
ghcr.io/eumel8/rancher-servicemonitor:0.2.1f34428cac187
golang.org/x/net@v0.22.0
stdlib@go1.22.1
0.55.0
1.25.13
1
ghcr.io/evilgn0me/ingressmonitorcontroller:v0.0.50bbfa4db14b9
golang.org/x/net@v0.47.0
stdlib@go1.24.13
0.55.0
1.25.13
1
ghcr.io/exalsius/exalsius-operator:0.12.0d24a579a3c75
golang.org/x/net@v0.50.0
0.55.0
1
ghcr.io/external-secrets/external-secrets:v0.3.1156a1ea4490ba
golang.org/x/net@v0.0.0-20210805182204-aaa1db679c0d
stdlib@go1.17.5
0.55.0
1.25.13
1
ghcr.io/external-secrets/external-secrets:v2.4.19440a40b3947
golang.org/x/net@v0.52.0
stdlib@go1.26.2
0.55.0
1.25.13
1
ghcr.io/external-secrets/external-secrets:v2.1.0ec40c3d9c48f
golang.org/x/net@v0.49.0
stdlib@go1.25.7
0.55.0
1.25.13
1
ghcr.io/extrality/cert-manager-webhook-namecheap:lateste3552fa0c68a
golang.org/x/net@v0.10.0
stdlib@go1.20.6
0.55.0
1.25.13
1
ghcr.io/fabioluciano/tekton-events-relay:0.10.184cb5a2b8b81
stdlib@go1.26.4
1.25.13
1
ghcr.io/fbuchner/meerkat-crm:1.7.0d513bdd3ae80
stdlib@go1.26.5
1.25.13
1
ghcr.io/ferama/rospo:v0.12.0ab40c1745534
golang.org/x/net@v0.20.0
stdlib@go1.21.6
0.55.0
1.25.13
1
ghcr.io/ferama/vipien:v0.5.3923a3f704b21
golang.org/x/net@v0.0.0-20211209124913-491a49abca63
stdlib@go1.17.8
0.55.0
1.25.13
1
ghcr.io/fernferret/mediawiki-backup:v0.2.2bbef381294ed
golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10
stdlib@go1.19.5
0.55.0
1.25.13
1
ghcr.io/ferretdb/ferretdb:2.7.05706414241eb
golang.org/x/net@v0.46.0
stdlib@go1.25.4
0.55.0
1.25.13
1
ghcr.io/ferro-labs/ai-gateway:1.2.0baa285ec0fc9
stdlib@go1.25.12
1.25.13
1
ghcr.io/fikaworks/grgate:v0.6.37104f60d8972
stdlib@go1.20.2
1.25.13
1
ghcr.io/firecrawl/firecrawl:2.11.371ea2d420cea57
golang.org/x/net@v0.41.0
stdlib@go1.24.13
0.55.0
1.25.13
1
ghcr.io/firecrawl/nuq-postgres:latestf9388bd25ae2
stdlib@go1.24.6
1.25.13
1
ghcr.io/fission/fission-bundle:v1.27.0d353720b037a
stdlib@go1.26.4
1.25.13
1
ghcr.io/fission/pre-upgrade-checks:v1.27.0b053fc3539b4
stdlib@go1.26.4
1.25.13
1
ghcr.io/fission/reporter:v1.27.0c77cc925debe
stdlib@go1.26.4
1.25.13
1
ghcr.io/fjogeleit/trivy-operator-polr-adapter:0.11.537029b4d464f
stdlib@go1.26.4
1.25.13
1
ghcr.io/flanksource/facet:0.1.7237237038be15
stdlib@go1.23.12
1.25.13
1
ghcr.io/flanksource/postgres:17.6-497383cebcf66281fc1
golang.org/x/net@v0.46.0
stdlib@go1.25.4
0.55.0
1.25.13
1
ghcr.io/flannel-io/flannel:v0.28.9708a2c9c1cfb
stdlib@go1.26.5
1.25.13
1
ghcr.io/flannel-io/flannel-cni-plugin:v1.9.1-flannel39fccdf677e6e
stdlib@go1.26.5
1.25.13
1
ghcr.io/flatcar/flatcar-linux-update-operator:v0.10.0-rc1f9063e20b1f6
golang.org/x/net@v0.8.0
stdlib@go1.20.6
0.55.0
1.25.13
1
ghcr.io/flatcar/nebraska:4.0.05c9e99ff7167
golang.org/x/net@v0.44.0
stdlib@go1.24.13
0.55.0
1.25.13
1
ghcr.io/flohansen/dasher-server:latest7cde8c3fa2d1
golang.org/x/net@v0.22.0
stdlib@go1.22.5
0.55.0
1.25.13
1
ghcr.io/fluent/fluent-operator/fluent-operator:3.10.03108194a4ecc
stdlib@go1.26.3
1.25.13
1
ghcr.io/fluxcd/flagger-loadtester:0.39.06a8546993cb5
golang.org/x/net@v0.28.0
stdlib@go1.24.12
0.55.0
1.25.13
1
ghcr.io/fluxcd/flux-cli:v2.9.1020edbaee890
golang.org/x/net@v0.49.0
stdlib@go1.26.4
0.55.0
1.25.13
1
ghcr.io/fluxcd/flux-cli:v2.5.1274a179fd402
golang.org/x/net@v0.35.0
stdlib@go1.23.6
0.55.0
1.25.13
1
ghcr.io/fluxcd/helm-controller:v1.2.062eaa9c9a929
golang.org/x/net@v0.34.0
stdlib@go1.23.6
0.55.0
1.25.13
1
ghcr.io/fluxcd/helm-controller:v1.6.2e17ab0e5885d
stdlib@go1.26.4
1.25.13
1
ghcr.io/fluxcd/source-controller:v1.5.000cd9316a379
golang.org/x/net@v0.34.0
stdlib@go1.23.6
0.55.0
1.25.13
1
ghcr.io/fluxcd/source-controller:v1.9.22b8d06650a1b
stdlib@go1.26.4
1.25.13
1
ghcr.io/fluxerapp/fluxer-static:2026.812.125337cfe98ae544df
golang.org/x/net@v0.42.0
stdlib@go1.25.0
0.55.0
1.25.13
1
ghcr.io/formancehq/console:console-on.v1.1.1a4d32c2f68b3
stdlib@go1.20.12
1.25.13
1
ghcr.io/formancehq/console-v3:v1.16.0c99e8ef2c545
stdlib@go1.23.8
1.25.13
1
ghcr.io/formancehq/dex:v1.0.4b803fbe1cdb8
golang.org/x/net@v0.0.0-20220927171203-f486391704dc
stdlib@go1.19.1
0.55.0
1.25.13
1
ghcr.io/formancehq/ledger:v1.9.203c1ddbda33b
golang.org/x/net@v0.4.0
stdlib@go1.18.10
0.55.0
1.25.13
1
ghcr.io/formancehq/membership:v1.11.024a0113d5fb0
golang.org/x/net@v0.41.0
stdlib@go1.24.6
0.55.0
1.25.13
1
ghcr.io/formancehq/portal:v1.16.06efef5d19d56
stdlib@go1.23.8
1.25.13
1
ghcr.io/foxcpp/maddy:0.9.5de42151adff6
golang.org/x/net@v0.34.0
stdlib@go1.23.12
0.55.0
1.25.13
1
ghcr.io/fpetr/readium-lcp-server-docker-helm/lcpserver:1.9.0324f9b7b689c
golang.org/x/net@v0.17.0
stdlib@go1.22.0
0.55.0
1.25.13
1

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.