CVE-2026-39821

High

Advisory

Published 22 May 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 8.2; base score, highest
EPSS: 0.007; 51st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 4,616; of 17,805 indexed, latest versions
Container images: 5,324; deployed by those charts
Fix available: 3 of 3; affected packages

Red Hat Security Advisory: git-lfs security update

Carried by container images the latest versions of 4,616 of 17,805 indexed charts deploy, on 5,324 images.

Affected package	Affected versions	Fixed in	Images
git-lfsrpm	2.13.3-3.el8_6	0:3.4.1-11.el8_10	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+190 more	1.25.13	5,284
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+220 more	0.55.0	3,716

OSV records: RHSA-2026:30853 GO-2026-5026

Charts affected

4,616 by stars

Chart

Latest

Affected images

Radar Score

temporaltemporal

0.28.9

8 of 13 See more

temporal temporal 0.28.9

8 of the 13 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
grafana/grafana :6.7.1	1ff3999e0fc0	golang.org/x/net@v0.0.0-20190923162816-aa69164e4478 stdlib@go1.13.4	0.55.0 1.25.13
jimmidyson/configmap-reload :v0.5.0	904d08e9f701	stdlib@go1.15.7	1.25.13
prom/pushgateway :v1.4.2	a684e7c830a4	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.16.9	0.55.0 1.25.13
temporalio/admin-tools :1.22.0	836af062af30	golang.org/x/net@v0.14.0 stdlib@go1.19.11	0.55.0 1.25.13
temporalio/server :1.22.0	ddeebf8bad8f	golang.org/x/net@v0.14.0 stdlib@go1.19.11	0.55.0 1.25.13
temporalio/ui :2.16.2	af9c9349708f	golang.org/x/net@v0.10.0 stdlib@go1.20.5	0.55.0 1.25.13
quay.io/prometheus/alertmanager :v0.23.0	9ab73a421b65	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985 stdlib@go1.16.7	0.55.0 1.25.13
quay.io/prometheus/prometheus :v2.31.1	a8779cfe553e	golang.org/x/net@v0.0.0-20211020060615-d418f374d309 stdlib@go1.17.3	0.55.0 1.25.13

Open the chart page →

21,061

temporal-proxytemporalio

0.2.1

1 of 1 See more

temporal-proxy temporalio 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
temporalio/temporal-proxy :v0.5.0	e9dc65181b93	stdlib@go1.26.4	1.25.13

Open the chart page →

129

tencentcloud-exportertencentcloud-exporter

0.1.3

1 of 1 See more

tencentcloud-exporter tencentcloud-exporter 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/behappy-project/behappy-tencentcloud-exporter :0.1.3	a0ba56e1501b	stdlib@go1.21.13	1.25.13

Open the chart page →

444

tensor_apptensor-app

0.2.2

1 of 3 See more

tensor_app tensor-app 0.2.2

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/mysql :5.7	4bc6bc963e6d	stdlib@go1.18.2	1.25.13

Open the chart page →

109,619

tensorzerotensorzero

2026.6.0

1 of 2 See more

tensorzero tensorzero 2026.6.0

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
tensorzero/ui :2026.6.0	f2563d54724e	stdlib@go1.23.12	1.25.13

Open the chart page →

4,078

echoserverteochenglim

0.1.0

1 of 1 See more

echoserver teochenglim 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
jmalloc/echo-server :0.3.1	e4eaee2c7998	golang.org/x/net@v0.0.0-20210813160813-60bc85c4be6d stdlib@go1.17	0.55.0 1.25.13

Open the chart page →

1,444

supabaseteochenglim

0.1.2

1 of 13 See more

supabase teochenglim 0.1.2

1 of the 13 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/postgres :15-alpine	fe0737ba566a	stdlib@go1.24.6	1.25.13

Open the chart page →

9,887

teredixteredix

0.0.2

1 of 1 See more

teredix teredix 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/shaharia-lab/teredix :0.0.2	ec727be4417a	stdlib@go1.21.5	1.25.13

Open the chart page →

1,077

terminusterminus

1.1.0

1 of 1 See more

terminus terminus 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/terminus-io/enforcer :v1.1.0	f21b905610d6	golang.org/x/net@v0.51.0 stdlib@go1.25.5	0.55.0 1.25.13

Open the chart page →

640

pagestest4322

1.0.0

1 of 3 See more

pages test4322 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.13

Open the chart page →

20,279

flask-contactstest-configmap

1.0.1

1 of 3 See more

flask-contacts test-configmap 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.13

Open the chart page →

5,884

codegentest-opea

1.0.0

1 of 5 See more

codegen test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
opea/codegen-ui :1.0	2bee4eb66f3e	stdlib@go1.20.7	1.25.13

Open the chart page →

29,111

codetranstest-opea

1.0.0

1 of 5 See more

codetrans test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
opea/codetrans-ui :1.0	3ef121f34610	stdlib@go1.20.12	1.25.13

Open the chart page →

28,683

docsumtest-opea

1.0.0

1 of 5 See more

docsum test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
opea/docsum-ui :1.0	7f854e9bffaf	stdlib@go1.20.12	1.25.13

Open the chart page →

29,157

gmctest-opea

1.0.0

1 of 1 See more

gmc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
opea/gmcmanager :1.0	514af17c495c	golang.org/x/net@v0.25.0 stdlib@go1.21.13	0.55.0 1.25.13

Open the chart page →

517

vehicle-dashboardtest-vehi-dash

0.1.0

1 of 7 See more

vehicle-dashboard test-vehi-dash 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/mongo :5.0.21	7c81758cb295	stdlib@go1.19.12	1.25.13

Open the chart page →

20,465

tezos-nodetezos-node

1.0.0

1 of 4 See more

tezos-node tezos-node 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ecadlabs/tezos_exporter :latest	4bcbe5d1cdd2	stdlib@go1.16.5	1.25.13

Open the chart page →

5,337

thanhvt27-lab-k8sthanh-vt

0.1.4

1 of 5 See more

thanhvt27-lab-k8s thanh-vt 0.1.4

1 of the 5 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
pysga1996/redis :latest	3af6d0c7db19	stdlib@go1.18.2	1.25.13

Open the chart page →

4,677

local-path-provisionerth-charts

0.0.29

1 of 1 See more

local-path-provisioner th-charts 0.0.29

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
rancher/local-path-provisioner :v0.0.29	9bebefa0b908	golang.org/x/net@v0.27.0 stdlib@go1.22.5	0.55.0 1.25.13

Open the chart page →

1,301

openmeteo-exporterth-charts

0.1.6

1 of 1 See more

openmeteo-exporter th-charts 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
thelande/openmeteo_exporter :v1.0.7	7e9072ace15f	golang.org/x/net@v0.38.0 stdlib@go1.23.11	0.55.0 1.25.13

Open the chart page →

1,382

owncloudth-charts

0.2.1

1 of 1 See more

owncloud th-charts 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
owncloud/server :10.15.0	51d9b74fc2a8	golang.org/x/net@v0.26.0 stdlib@go1.22.4	0.55.0 1.25.13

Open the chart page →

10,130

ping-exporterth-charts

0.1.1

1 of 1 See more

ping-exporter th-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
czerwonk/ping_exporter :v1.1.3	94f51e1ef1e2	golang.org/x/net@v0.22.0 stdlib@go1.22.1	0.55.0 1.25.13

Open the chart page →

1,236

prusa-exporterth-charts

0.3.0

1 of 1 See more

prusa-exporter th-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
pubeldev/prusa_exporter :2.0.0	1091665a020a	stdlib@go1.25.5	1.25.13

Open the chart page →

909

the0the0

0.9.8

4 of 9 See more

the0 the0 0.9.8

4 of the 9 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/mongo :7-jammy	406a4fdca9fc	stdlib@go1.26.5	1.25.13
library/nats :2.10-alpine	b83efabe3e7d	stdlib@go1.24.2	1.25.13
library/postgres :15-alpine	fe0737ba566a	stdlib@go1.24.6	1.25.13
minio/minio :latest	14cea493d9a3	golang.org/x/net@v0.39.0 stdlib@go1.24.6	0.55.0 1.25.13

Open the chart page →

7,528

trafficlight-apithecampagnards

0.1.1

1 of 1 See more

trafficlight-api thecampagnards 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
thecampagnards/trafficlight-api :main	7dca9d973837	stdlib@go1.16.4	1.25.13

Open the chart page →

4,419

steamcmdthetredev

1.0.9

1 of 1 See more

steamcmd thetredev 1.0.9

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/thetredev/steamcmd :srcds-20240309	dbb0f042cb31	stdlib@go1.18.2	1.25.13

Open the chart page →

1,076

thingsboardthingsboard

0.1.3

1 of 12 See more

thingsboard thingsboard 0.1.3

1 of the 12 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/postgres :12	2f2a8c2a7d10	stdlib@go1.18.2	1.25.13

Open the chart page →

25,562

pagesthiru-pages

1.0.0

1 of 3 See more

pages thiru-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.13

Open the chart page →

20,279

mc-routerthl-charts

0.1.0

1 of 1 See more

mc-router thl-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
itzg/mc-router :1.16.1	bb552b59fb53	golang.org/x/net@v0.0.0-20210917221730-978cfadd31cf stdlib@go1.18.4	0.55.0 1.25.13

Open the chart page →

1,856

monitoringthl-charts

0.1.1

8 of 10 See more

monitoring thl-charts 0.1.1

8 of the 10 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
grafana/grafana :8.5.0	42d3e6bc1865	golang.org/x/net@v0.0.0-20211118161319-6a13c67c3ce4 stdlib@go1.17.9	0.55.0 1.25.13
grafana/loki :2.5.0	f9ef133793af	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.8	0.55.0 1.25.13
grafana/promtail :2.4.2	626900031c4e	golang.org/x/net@v0.0.0-20211101193420-4a448f8816b3 stdlib@go1.17.2	0.55.0 1.25.13
jimmidyson/configmap-reload :v0.5.0	904d08e9f701	stdlib@go1.15.7	1.25.13
prom/pushgateway :v1.4.2	a684e7c830a4	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.16.9	0.55.0 1.25.13
quay.io/prometheus/alertmanager :v0.23.0	9ab73a421b65	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985 stdlib@go1.16.7	0.55.0 1.25.13
quay.io/prometheus/node-exporter :v1.3.0	23ff46c728b9	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.17.3	0.55.0 1.25.13
quay.io/prometheus/prometheus :v2.34.0	b37103e03399	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.8	0.55.0 1.25.13

Open the chart page →

18,947

pagesthuy-pages

1.0.0

1 of 3 See more

pages thuy-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.13

Open the chart page →

20,279

tile38tile38

0.6.1

1 of 2 See more

tile38 tile38 0.6.1

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
tile38/tile38 :1.38.0	5b61c6f3b32e	golang.org/x/net@v0.48.0 stdlib@go1.26.4	0.55.0 1.25.13

Open the chart page →

420

pock-helm-charttinote-chart

0.1.0

1 of 3 See more

pock-helm-chart tinote-chart 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
nginx/nginx-ingress :1.11.1	eb5b4fd73325	golang.org/x/net@v0.0.0-20201216054612-986b41b23924 stdlib@go1.15.11	0.55.0 1.25.13

Open the chart page →

6,891

tiny-api-charttiny-api

1.0.0

1 of 1 See more

tiny-api-chart tiny-api 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
stubin87/tiny-api :v1.1.0	2e5c42e92ec8	stdlib@go1.19.1	1.25.13

Open the chart page →

1,127

grafanatnh

5.3.0

1 of 1 See more

grafana tnh 5.3.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
grafana/grafana :7.0.3	d72946c8e5d5	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.3	0.55.0 1.25.13

Open the chart page →

3,199

jenkinstnh

2.7.1

1 of 2 See more

jenkins tnh 2.7.1

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
jenkins/jenkins :lts	c1e4c349365f	golang.org/x/net@v0.38.0 stdlib@go1.25.3	0.55.0 1.25.13

Open the chart page →

4,492

prometheustnh

11.6.0

4 of 6 See more

prometheus tnh 11.6.0

4 of the 6 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
prom/alertmanager :v0.20.0	7e4e9f7a0954	golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80 stdlib@go1.13.5	0.55.0 1.25.13
prom/prometheus :v2.19.0	bfad037f95e5	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9 stdlib@go1.14.4	0.55.0 1.25.13
prom/pushgateway :v1.2.0	0a9031142481	stdlib@go1.13.8	1.25.13
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120 stdlib@go1.14.4	0.55.0 1.25.13

Open the chart page →

8,494

todolist-charttodolist-chart

0.1.7

6 of 10 See more

todolist-chart todolist-chart 0.1.7

6 of the 10 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
erenozcan17/go_backend :v4.2	50b4f23422b6	golang.org/x/net@v0.10.0 stdlib@go1.23.12	0.55.0 1.25.13
grafana/grafana :latest	f772d434e8fa	golang.org/x/net@v0.51.0 stdlib@go1.26.5	0.55.0 1.25.13
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.13
quay.io/prometheus/blackbox-exporter :latest	e753ff9f3fc4	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.55.0 1.25.13
quay.io/prometheus/mysqld-exporter :latest	abed8dac117b	stdlib@go1.26.5	1.25.13
quay.io/prometheus/node-exporter :latest	1b4e4438faca	stdlib@go1.26.5	1.25.13

Open the chart page →

7,083

token-servertoken-server

1.0.9

1 of 1 See more

token-server token-server 1.0.9

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
udhos/token-server :1.0.9	728013f2fac1	golang.org/x/net@v0.44.0 stdlib@go1.25.1	0.55.0 1.25.13

Open the chart page →

1,247

netbirdtotmicro

1.8.2

3 of 4 See more

netbird totmicro 1.8.2

3 of the 4 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
netbirdio/management :0.60.2	52682e5f48f9	golang.org/x/net@v0.42.0 stdlib@go1.23.12	0.55.0 1.25.13
netbirdio/relay :0.60.2	a10762533793	golang.org/x/net@v0.42.0 stdlib@go1.23.12	0.55.0 1.25.13
netbirdio/signal :0.60.2	67176bcbf6ab	golang.org/x/net@v0.42.0 stdlib@go1.23.12	0.55.0 1.25.13

Open the chart page →

6,081

hub-managertraefik

1.0.0

1 of 1 See more

hub-manager traefik 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/traefik/hub-manager :v0.45.1	d1cff2560c67	stdlib@go1.26.0	1.25.13

Open the chart page →

649

traefik-jwt-decodetraefik-jwt-decode

0.1.0

1 of 1 See more

traefik-jwt-decode traefik-jwt-decode 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
simonschneider/traefik-jwt-decode :latest	d674ac370f80	stdlib@go1.17.13	1.25.13

Open the chart page →

1,310

traefik-secrets-exportertraefik-secrets-exporter

0.0.2

1 of 1 See more

traefik-secrets-exporter traefik-secrets-exporter 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/reiche-world/traefik-secrets-exporter :0.0.2	1485ff93cbf9	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.55.0 1.25.13

Open the chart page →

1,671

traktortraktor

0.0.17

1 of 1 See more

traktor traktor 0.0.17

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
gdxbsv/traktor :0.0.17	675693335054	golang.org/x/net@v0.38.0 stdlib@go1.24.13	0.55.0 1.25.13

Open the chart page →

382

nfs-servertranhailong

0.1.2

1 of 1 See more

nfs-server tranhailong 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
tranhailong/nfs-server :4.2-2-gcsfuse	028662749be2	golang.org/x/net@v0.4.0 stdlib@go1.18.4	0.55.0 1.25.13

Open the chart page →

2,331

apptreenity

0.1.53

1 of 2 See more

app treenity 0.1.53

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/postgres :17	67f41722b7a8	stdlib@go1.24.6	1.25.13

Open the chart page →

1,856

treenitytreenity

0.1.3

2 of 4 See more

treenity treenity 0.1.3

2 of the 4 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/nats :2.9.6-alpine3.16	f576cdc17cc3	stdlib@go1.19.3	1.25.13
library/postgres :14	156f0b253fd6	stdlib@go1.24.6	1.25.13

Open the chart page →

3,405

trident-protecttrident-protect

100.2606.0

2 of 2 See more

trident-protect trident-protect 100.2606.0

2 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
netapp/controller :26.06.0	8235a77cfc92	golang.org/x/net@v0.54.0 stdlib@go1.26.4	0.55.0 1.25.13
netapp/trident-protect-utils :v2.0.0	cd0c18d8f9ec	golang.org/x/net@v0.40.0 stdlib@go1.24.12	0.55.0 1.25.13

Open the chart page →

1,379

trident-protect-bxp-previewtrident-protect

100.2511.0-bxp-preview

3 of 3 See more

trident-protect-bxp-preview trident-protect 100.2511.0-bxp-preview

3 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
netapp/controller :25.11.0-bxp-preview	06f6c9a0653f	golang.org/x/net@v0.39.0 stdlib@go1.24.9	0.55.0 1.25.13
netapp/trident-protect-connector :25.11.0-bxp-preview	ec22fc6e5c5a	golang.org/x/net@v0.38.0 stdlib@go1.24.9	0.55.0 1.25.13
netapp/trident-protect-utils :v1.0.0	58b9fac358bd	golang.org/x/net@v0.38.0 stdlib@go1.24.8	0.55.0 1.25.13

Open the chart page →

2,201

trident-protect-consoletrident-protect

100.2608.0-console

3 of 3 See more

trident-protect-console trident-protect 100.2608.0-console

3 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
netapp/controller :26.08.0-console	09c6cc6b5f71	stdlib@go1.26.4	1.25.13
netapp/trident-protect-connector :26.08.0-console	ae8c613429dc	stdlib@go1.26.4	1.25.13
netapp/trident-protect-utils :v2.0.0	cd0c18d8f9ec	golang.org/x/net@v0.40.0 stdlib@go1.24.12	0.55.0 1.25.13

Open the chart page →

1,370

Container images carrying it

5,324 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
quay.io/prometheus-operator/prometheus-config-reloader :v0.74.0	d55631c7a740	golang.org/x/net@v0.25.0 stdlib@go1.22.3	0.55.0 1.25.13	3
quay.io/prometheus-operator/prometheus-operator :v0.90.1	52a6a92d915e	golang.org/x/net@v0.52.0 stdlib@go1.25.8	0.55.0 1.25.13	3
quay.io/prometheus-operator/prometheus-operator :v0.92.1	7d9247d23514	stdlib@go1.26.4	1.25.13	3
quay.io/prometheus-operator/prometheus-operator :v0.50.0	ab4f480f2cc6	golang.org/x/net@v0.0.0-20210610132358-84b48f89b13b stdlib@go1.16	0.55.0 1.25.13	3
quay.io/prometheus/prometheus :v2.41.0	1a3e9a878e50	golang.org/x/net@v0.4.0 stdlib@go1.19.4	0.55.0 1.25.13	3
quay.io/prometheus/prometheus :v2.55.0	378f4e037035	golang.org/x/net@v0.28.0 stdlib@go1.23.2	0.55.0 1.25.13	3
quay.io/prometheus/prometheus :v2.26.0	38d40a760569	golang.org/x/net@v0.0.0-20210324051636-2c4c8ecb7826 stdlib@go1.16.2	0.55.0 1.25.13	3
quay.io/prometheus/prometheus :v3.10.0	7571a304e67f	golang.org/x/net@v0.49.0 stdlib@go1.26.0	0.55.0 1.25.13	3
quay.io/prometheus/prometheus :v2.31.1	a8779cfe553e	golang.org/x/net@v0.0.0-20211020060615-d418f374d309 stdlib@go1.17.3	0.55.0 1.25.13	3
quay.io/prometheus/prometheus :v2.43.0	f5c29683a301	golang.org/x/net@v0.8.0 stdlib@go1.19.7	0.55.0 1.25.13	3
quay.io/prometheus/prometheus :v2.54.1	f6639335d34a	golang.org/x/net@v0.27.0 stdlib@go1.22.6	0.55.0 1.25.13	3
quay.io/prometheus/pushgateway :v1.10.0	7a4d0696a24e	golang.org/x/net@v0.28.0 stdlib@go1.23.1	0.55.0 1.25.13	3
quay.io/prometheus/pushgateway :v1.8.0	c159e946abf4	golang.org/x/net@v0.22.0 stdlib@go1.22.1	0.55.0 1.25.13	3
quay.io/prometheus/snmp-exporter :v0.30.1	e5fd5e8b43ac	golang.org/x/net@v0.48.0 stdlib@go1.25.5	0.55.0 1.25.13	3
quay.io/redhat-cop/kube-rbac-proxy :v0.11.0	c68135620167	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15.15	0.55.0 1.25.13	3
quay.io/sighup/permission-manager :v1.7.1-rc1	f5e6a5dcee33	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.16.8	0.55.0 1.25.13	3
registry.k8s.io/ingress-nginx/controller :v1.5.1	4ba73c697770	golang.org/x/net@v0.1.0 stdlib@go1.19.2	0.55.0 1.25.13	3
registry.k8s.io/ingress-nginx/controller :v1.8.1	e5c4824e7375	golang.org/x/net@v0.10.0 stdlib@go1.20.5	0.55.0 1.25.13	3
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.4.1	36d05b4077fb	golang.org/x/net@v0.22.0 stdlib@go1.22.2	0.55.0 1.25.13	3
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.5.2	e8825994b7a2	golang.org/x/net@v0.37.0 stdlib@go1.24.1	0.55.0 1.25.13	3
registry.k8s.io/kubectl :v1.31.0	99b37df34bc4	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.55.0 1.25.13	3
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.17.0	2bbc91556733	golang.org/x/net@v0.41.0 stdlib@go1.24.6	0.55.0 1.25.13	3
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.19.0	6b2f0b6f2f86	golang.org/x/net@v0.51.0 stdlib@go1.26.2	0.55.0 1.25.13	3
registry.k8s.io/sig-storage/csi-attacher :v4.3.0	4eb73137b663	golang.org/x/net@v0.8.0 stdlib@go1.20.3	0.55.0 1.25.13	3
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.12.0	0d23a6fd60c4	golang.org/x/net@v0.28.0 stdlib@go1.22.5	0.55.0 1.25.13	3
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.14.0	5244abbe87e0	golang.org/x/net@v0.40.0 stdlib@go1.24.2	0.55.0 1.25.13	3
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.10.1	f25af73ee708	golang.org/x/net@v0.18.0 stdlib@go1.21.5	0.55.0 1.25.13	3
registry.k8s.io/sig-storage/csi-provisioner :v5.2.0	d5e46da8aff7	golang.org/x/net@v0.34.0 stdlib@go1.23.1	0.55.0 1.25.13	3
registry.k8s.io/sig-storage/csi-resizer :v1.8.0	2e2b44393539	golang.org/x/net@v0.8.0 stdlib@go1.20.3	0.55.0 1.25.13	3
registry.k8s.io/sig-storage/csi-resizer :v1.13.2	8ddd178ba5d0	golang.org/x/net@v0.34.0 stdlib@go1.23.1	0.55.0 1.25.13	3
registry.k8s.io/sig-storage/csi-resizer :v1.9.0	f1f352df9787	golang.org/x/net@v0.13.0 stdlib@go1.20.5	0.55.0 1.25.13	3
registry.k8s.io/sig-storage/csi-snapshotter :v8.4.0	c7e0a3718832	golang.org/x/net@v0.39.0 stdlib@go1.24.6	0.55.0 1.25.13	3
registry.k8s.io/sig-storage/livenessprobe :v2.10.0	4dc0b87ccd69	golang.org/x/net@v0.8.0 stdlib@go1.20.3	0.55.0 1.25.13	3
registry.k8s.io/sig-storage/nfs-provisioner :v4.0.8	c825f3d5e28b	golang.org/x/net@v0.0.0-20190923162816-aa69164e4478 stdlib@go1.16.2	0.55.0 1.25.13	3
1password/scim :v2.3.1	29d0c6cb67eb	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.16.8	0.55.0 1.25.13	2
abutaha/aws-es-proxy :v1.1	190ed2d1dfc8	stdlib@go1.14.1	1.25.13	2
alazidis/kube-netlag :1.1.0	0e8c84152201	golang.org/x/net@v0.33.0 stdlib@go1.24.13	0.55.0 1.25.13	2
alpine/git :latest	4f9488b7295b	golang.org/x/net@v0.54.0 stdlib@go1.26.3	0.55.0 1.25.13	2
alpine/k8s :1.32.12	048f8d9c8cc7	golang.org/x/net@v0.47.0 stdlib@go1.25.7	0.55.0 1.25.13	2
alpine/kubectl :1.35.4	9ccd82364762	golang.org/x/net@v0.47.0 stdlib@go1.25.9	0.55.0 1.25.13	2
alpine/kubectl :1.35.2	ec8f734b0a10	golang.org/x/net@v0.47.0 stdlib@go1.25.7	0.55.0 1.25.13	2
altinity/clickhouse-operator :0.21.2	cd9252644ce0	golang.org/x/net@v0.7.0 stdlib@go1.19.10	0.55.0 1.25.13	2
altinity/metrics-exporter :0.21.2	df3d57215356	golang.org/x/net@v0.7.0 stdlib@go1.19.10	0.55.0 1.25.13	2
apache/superset :dockerize	afe59523a6c8	golang.org/x/net@v0.10.0 stdlib@go1.20.4	0.55.0 1.25.13	2
apecloud/apecloud-mcp :0.1.0	94041b080510	stdlib@go1.23.7	1.25.13	2
aquasec/kube-bench :v0.8.0	ea3e33bc3c4e	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.55.0 1.25.13	2
assistiot/fl_repository_db :latest	ad8f72108636	golang.org/x/net@v0.12.0 stdlib@go1.17.10	0.55.0 1.25.13	2
ayushsobti/kube-monkey :v0.5.2	4c94e8f8924e	golang.org/x/net@v0.0.0-20220520000938-2e3eb7b945c2 stdlib@go1.18.9	0.55.0 1.25.13	2
bitnamilegacy/elasticsearch :9.1.2-debian-12-r0	00176a47afa0	golang.org/x/net@v0.42.0 stdlib@go1.24.6	0.55.0 1.25.13	2
bitnamilegacy/influxdb :2.6.1-debian-11-r18	d17df1f9d745	golang.org/x/net@v0.0.0-20220617184016-355a448f1bc9 stdlib@go1.19.6	0.55.0 1.25.13	2