CVE-2026-39821

High

Advisory

Published 22 May 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 8.2; base score, highest
EPSS: 0.007; 51st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 4,610; of 17,821 indexed, latest versions
Container images: 5,331; deployed by those charts
Fix available: 3 of 3; affected packages

Red Hat Security Advisory: git-lfs security update

Carried by container images the latest versions of 4,610 of 17,821 indexed charts deploy, on 5,331 images.

Affected package	Affected versions	Fixed in	Images
git-lfsrpm	2.13.3-3.el8_6	0:3.4.1-11.el8_10	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+191 more	1.25.13	5,291
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+220 more	0.55.0	3,727

OSV records: RHSA-2026:30853 GO-2026-5026

Charts affected

4,610 by stars

Chart

Latest

Affected images

Radar Score

aibrixdanchev

0.7.0

2 of 5 See more

aibrix danchev 0.7.0

2 of the 5 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
aibrix/controller-manager :v0.7.0	76aabbbfda79	golang.org/x/net@v0.34.0 stdlib@go1.22.12	0.55.0 1.25.13
aibrix/gateway-plugins :v0.7.0	5b93ea4c753a	golang.org/x/net@v0.34.0 stdlib@go1.22.12	0.55.0 1.25.13

Open the chart page →

5,424

data-fairdata354-helm

1.1.2

1 of 12 See more

data-fair data354-helm 1.1.2

1 of the 12 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/mongo :4.4	4be76f674fc4	stdlib@go1.21.12	1.25.13

Open the chart page →

38,819

datacube-explorerdatacube-charts

0.5.32

1 of 1 See more

datacube-explorer datacube-charts 0.5.32

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
opendatacube/explorer :latest	120457ffcd69	stdlib@go1.22.2	1.25.13

Open the chart page →

4,965

extendeddaemonsetdatadog

0.3.3

1 of 1 See more

extendeddaemonset datadog 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
datadog/extendeddaemonset :v0.8.0	513a4377aed5	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.15	0.55.0 1.25.13

Open the chart page →

4,761

datadogdatadog-test

2.4.23

1 of 2 See more

datadog datadog-test 2.4.23

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
datadog/agent :7.22.0	8f20e56b5311	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e stdlib@go1.13.11	0.55.0 1.25.13

Open the chart page →

4,573

dbrepodbrepo

1.13.3

11 of 25 See more

dbrepo dbrepo 1.13.3

11 of the 25 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
bitnamilegacy/grafana :11.4.0-debian-12-r0	cb8ab5515676	golang.org/x/net@v0.29.0 stdlib@go1.23.4	0.55.0 1.25.13
bitnamilegacy/mariadb :11.4.5-debian-12-r12	8bc50a0961a7	stdlib@go1.23.8	1.25.13
bitnamilegacy/mariadb-galera :11.3.2-debian-12-r9	aee9c668098f	stdlib@go1.22.5	1.25.13
bitnamilegacy/mysqld-exporter :0.15.1-debian-12-r26	11a5f0b79e79	golang.org/x/net@v0.17.0 stdlib@go1.21.12	0.55.0 1.25.13
bitnamilegacy/nginx :1.28.0-debian-12-r0	eaf9066e86f6	stdlib@go1.23.8	1.25.13
bitnamilegacy/opensearch :2.18.0-debian-12-r0	d8440eb6b290	golang.org/x/net@v0.27.0 stdlib@go1.22.8	0.55.0 1.25.13
bitnamilegacy/os-shell :12-debian-12-r32	17444b4b2c96	golang.org/x/net@v0.27.0 stdlib@go1.22.8	0.55.0 1.25.13
bitnamilegacy/postgres-exporter :0.15.0-debian-12-r44	e7e1b3a90682	golang.org/x/net@v0.17.0 stdlib@go1.22.8	0.55.0 1.25.13
bitnamilegacy/prometheus :2.54.1-debian-12-r4	08b1b7cb6a5b	golang.org/x/net@v0.27.0 stdlib@go1.22.7	0.55.0 1.25.13
bitnamilegacy/seaweedfs :3.87.0-debian-12-r1	0cb31d0fc356	golang.org/x/net@v0.39.0 stdlib@go1.24.1	0.55.0 1.25.13
bitnamilegacy/valkey :latest	0384ca2eec63	stdlib@go1.23.10	1.25.13

Open the chart page →

53,852

deckarddeckard

0.1.8

2 of 3 See more

deckard deckard 0.1.8

2 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
bitnami/mongodb :latest	e46cffb66274	stdlib@go1.26.5	1.25.13
blipai/deckard :0.1.8	db8cd873d0eb	stdlib@go1.26.4	1.25.13

Open the chart page →

385

mealiedeimosfr-charts

1.0.15

1 of 1 See more

mealie deimosfr-charts 1.0.15

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/mealie-recipes/mealie :v3.24.0	0b08ac3a9f0a	stdlib@go1.24.4	1.25.13

Open the chart page →

4,105

dregsydeliveryhero

0.1.5

1 of 1 See more

dregsy deliveryhero 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
xelalex/dregsy :0.4.3	574054e1c417	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18.3	0.55.0 1.25.13

Open the chart page →

2,978

gripmockdeliveryhero

1.1.3

1 of 1 See more

gripmock deliveryhero 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
tkpd/gripmock :1.10.1	74441dadcfbd	stdlib@go1.14.6	1.25.13

Open the chart page →

2,795

labelsmanager-controllerdeliveryhero

1.0.4

1 of 1 See more

labelsmanager-controller deliveryhero 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
thomasnyambati/labelsmanager-controller :1.0.0	148ae3f99fea	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.15	0.55.0 1.25.13

Open the chart page →

2,306

weblatedeliveryhero

0.3.2

1 of 3 See more

weblate deliveryhero 0.3.2

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
weblate/weblate :4.2.2-1	69c160d37a3c	golang.org/x/net@v0.0.0-20190620200207-3b0461eec859 stdlib@go1.13.5	0.55.0 1.25.13

Open the chart page →

8,025

snapshot-controllerdemocratic-csi

0.3.0

1 of 1 See more

snapshot-controller democratic-csi 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/snapshot-controller :v8.2.1	472fa35a89da	golang.org/x/net@v0.33.0 stdlib@go1.23.6	0.55.0 1.25.13

Open the chart page →

467

developer-operatordeveloper-operator

2.1.2

1 of 1 See more

developer-operator developer-operator 2.1.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
registry.gitlab.com/xrow-public/developer-operator/developer-operator-controller :2.1.2	301847adfe16	golang.org/x/net@v0.41.0 stdlib@go1.24.5	0.55.0 1.25.13

Open the chart page →

1,909

kube-bench-metricsdevopstales

0.1.0

1 of 1 See more

kube-bench-metrics devopstales 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
elastisys/kube-bench-metrics :0.1.6	509b94f1da55	stdlib@go1.15.7	1.25.13

Open the chart page →

2,112

kubedashdevopstales

4.0.0

5 of 8 See more

kubedash devopstales 4.0.0

5 of the 8 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/postgres :18.3	a9abf4275f9e	stdlib@go1.24.6	1.25.13
oliver006/redis_exporter :v1.82.0-alpine	da9e89ee4e75	stdlib@go1.26.1	1.25.13
prom/statsd-exporter :v0.22.4	8be660470961	stdlib@go1.17.3	1.25.13
sosedoff/pgweb :latest	a5256d416e2e	golang.org/x/net@v0.47.0 stdlib@go1.24.6	0.55.0 1.25.13
quay.io/prometheuscommunity/postgres-exporter :v0.19.1	e96064f87622	golang.org/x/net@v0.48.0 stdlib@go1.25.7	0.55.0 1.25.13

Open the chart page →

9,395

permission-managerdevopstales

1.8.0

1 of 1 See more

permission-manager devopstales 1.8.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
quay.io/sighup/permission-manager :v1.7.1-rc1	f5e6a5dcee33	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.16.8	0.55.0 1.25.13

Open the chart page →

2,267

trivy-operatordevopstales

2.5.0

1 of 1 See more

trivy-operator devopstales 2.5.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
devopstales/trivy-operator :2.5	75136aa7a26e	golang.org/x/net@v0.4.0 stdlib@go1.18.10	0.55.0 1.25.13

Open the chart page →

5,608

dnsmasqdevplayer0

0.1.5

1 of 2 See more

dnsmasq devplayer0 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/devplayer0/kubelan :0.2.3	b776dae45d08	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.5	0.55.0 1.25.13

Open the chart page →

3,393

whoamidevplayer0

0.1.2

1 of 1 See more

whoami devplayer0 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
traefik/whoami :v1.6.1	2c52bb2c8480	stdlib@go1.15.6	1.25.13

Open the chart page →

1,216

calicodevtron

0.1.1

4 of 4 See more

calico devtron 0.1.1

4 of the 4 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
quay.io/devtron/calico-networking :kube-controllers-v3.19.1	2ff71ba65cd7	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.15.2	0.55.0 1.25.13
quay.io/devtron/calico-networking :cni-v3.19.1	51f294c56842	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.15.2	0.55.0 1.25.13
quay.io/devtron/calico-networking :node-v3.19.1	bc4aa22272ef	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.15.2	0.55.0 1.25.13
quay.io/devtron/calico-networking :pod2daemon-flexvol-v3.19.1	c1f36b6e18e0	stdlib@go1.15.2	1.25.13

Open the chart page →

10,099

clairdevtron

0.1.14

1 of 2 See more

clair devtron 0.1.14

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
quay.io/devtron/clair :4.3.6	75fb847ac045	golang.org/x/net@v0.0.0-20210805182204-aaa1db679c0d stdlib@go1.17.6	0.55.0 1.25.13

Open the chart page →

6,239

discord-alertmanagerdevtron-labs

0.10.0

1 of 1 See more

discord-alertmanager devtron-labs 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
quay.io/devtron/discord-alertmanager :ceceb475-65-352	03586419ca31	stdlib@go1.18.1	1.25.13

Open the chart page →

952

dex-serverdex-server

1.19.1

2 of 3 See more

dex-server dex-server 1.19.1

2 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
dexidp/dex :v2.39.1-distroless	43655afd1a8f	golang.org/x/net@v0.24.0 stdlib@go1.21.6	0.55.0 1.25.13
public.ecr.aws/cloudnatix/llmariner/database-creator :1.19.1	62375abc3c56	stdlib@go1.23.12	1.25.13

Open the chart page →

2,246

digispoof-interfacedigispoof-interface

1.0.0

1 of 3 See more

digispoof-interface digispoof-interface 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/digispoof-interface-php :latest	03aba499950f	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.55.0 1.25.13

Open the chart page →

7,790

matomodigitalist-open-cloud-matomo

12.0.20

1 of 3 See more

matomo digitalist-open-cloud-matomo 12.0.20

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
hipages/php-fpm_exporter :2.2.0	9b5be9d3d955	stdlib@go1.17.10	1.25.13

Open the chart page →

3,540

directusdirectus-io

2.1.0

3 of 3 See more

directus directus-io 2.1.0

3 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
bitnamilegacy/mysql :9.4.0-debian-12-r1	ec13e229247a	stdlib@go1.24.6	1.25.13
bitnamilegacy/redis :8.2.1-debian-12-r0	25bf63f3caf7	stdlib@go1.25.0	1.25.13
directus/directus :12.0.2	9c8470ea465c	stdlib@go1.23.12	1.25.13

Open the chart page →

7,673

alertmanager-ntfydjjudas21

0.1.2

1 of 1 See more

alertmanager-ntfy djjudas21 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/alexbakker/alertmanager-ntfy :1.0.1	2f4db8064595	golang.org/x/net@v0.41.0 stdlib@go1.24.4	0.55.0 1.25.13

Open the chart page →

641

dkim-managerdkim-manager

0.2.0

1 of 1 See more

dkim-manager dkim-manager 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/hsn723/dkim-manager :1.4.0	0312232b31a2	golang.org/x/net@v0.50.0 stdlib@go1.26.0	0.55.0 1.25.13

Open the chart page →

293

myappdl-grafana-webapp

0.1.0

1 of 2 See more

myapp dl-grafana-webapp 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
onkar17/grafana :latest	aef3ebd6e24e	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.16.1	0.55.0 1.25.13

Open the chart page →

2,527

dnation-pingdnationcloud

0.1.9

4 of 5 See more

dnation-ping dnationcloud 0.1.9

4 of the 5 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
grafana/grafana :7.3.5	511bc20bfcd1	golang.org/x/net@v0.0.0-20201022231255-08b38378de70 stdlib@go1.15.5	0.55.0 1.25.13
jimmidyson/configmap-reload :v0.4.0	17d34fd73f9e	stdlib@go1.14.4	1.25.13
prom/blackbox-exporter :v0.18.0	1ffc3f109eb3	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9 stdlib@go1.15.2	0.55.0 1.25.13
prom/prometheus :v2.21.0	d43417c260e5	golang.org/x/net@v0.0.0-20200822124328-c89045814202 stdlib@go1.15.2	0.55.0 1.25.13

Open the chart page →

10,475

docker-in-dockerdocker-in-docker

0.0.3

1 of 2 See more

docker-in-docker docker-in-docker 0.0.3

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/docker :24.0.2-dind	1d148deae16a	golang.org/x/net@v0.8.0 stdlib@go1.20.4	0.55.0 1.25.13

Open the chart page →

2,595

docker-registrydocker-repository

0.1.0

1 of 1 See more

docker-registry docker-repository 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/registry :latest	fd374bae807c	golang.org/x/net@v0.52.0 stdlib@go1.25.9	0.55.0 1.25.13

Open the chart page →

509

dockyarddockyard

0.4.0

1 of 1 See more

dockyard dockyard 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/kgma74/dockyard :0.4.0	b40439329191	golang.org/x/net@v0.29.0 stdlib@go1.26.5	0.55.0 1.25.13

Open the chart page →

1,559

thermitedollarshaveclub

0.1.17

1 of 1 See more

thermite dollarshaveclub 0.1.17

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
dollarshaveclub/thermite :0.0.31	663cbf25fcfe	golang.org/x/net@v0.0.0-20210805182204-aaa1db679c0d stdlib@go1.17.1	0.55.0 1.25.13

Open the chart page →

2,740

domain-lockerdomain-locker

0.2.8

1 of 3 See more

domain-locker domain-locker 0.2.8

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/postgres :15-alpine	fe0737ba566a	stdlib@go1.24.6	1.25.13

Open the chart page →

1,889

dominodomino

0.1.11

1 of 3 See more

domino domino 0.1.11

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/postgres :13	4689940c6838	stdlib@go1.24.6	1.25.13

Open the chart page →

8,968

archerydouban

0.4.3

2 of 6 See more

archery douban 0.4.3

2 of the 6 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
hanchuanchuan/goinception :latest	b3c0dd26fb50	golang.org/x/net@v0.23.0 stdlib@go1.22.1	0.55.0 1.25.13
hhyo/archery :v1.9.1	1aa41843419e	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.6	0.55.0 1.25.13

Open the chart page →

5,863

karmadouban

1.9.2

1 of 1 See more

karma douban 1.9.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/prymitive/karma :v0.85	d06892218680	golang.org/x/net@v0.0.0-20210503060351-7fd8e65b6420 stdlib@go1.16.3	0.55.0 1.25.13

Open the chart page →

2,018

seafiledr300481

0.12.1

1 of 1 See more

seafile dr300481 0.12.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
seafileltd/seafile-mc :11.0.12	d0c66e4621bd	stdlib@go1.21.4	1.25.13

Open the chart page →

73,510

dragonfly-stackdragonfly

0.1.2

4 of 7 See more

dragonfly-stack dragonfly 0.1.2

4 of the 7 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
dragonflyoss/client :v0.1.82	edf3e921f4e0	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.55.0 1.25.13
dragonflyoss/manager :v2.1.49	c3ef7f10698d	golang.org/x/net@v0.19.0 stdlib@go1.21.1	0.55.0 1.25.13
dragonflyoss/scheduler :v2.1.49	523785c77787	golang.org/x/net@v0.19.0 stdlib@go1.21.1	0.55.0 1.25.13
ghcr.io/containerd/nydus-snapshotter :v0.9.0	56f8617363b4	golang.org/x/net@v0.8.0 stdlib@go1.18.10	0.55.0 1.25.13

Open the chart page →

18,997

nydus-snapshotterdragonfly

0.0.10

1 of 2 See more

nydus-snapshotter dragonfly 0.0.10

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/containerd/nydus-snapshotter :v0.9.0	56f8617363b4	golang.org/x/net@v0.8.0 stdlib@go1.18.10	0.55.0 1.25.13

Open the chart page →

3,669

rstudiodsri-helm-charts

0.1.28

1 of 1 See more

rstudio dsri-helm-charts 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/maastrichtu-ids/rstudio :latest	981aa4c109e1	stdlib@go1.20.12	1.25.13

Open the chart page →

69,456

dyff-operatordyff-operator

0.24.20

1 of 1 See more

dyff-operator dyff-operator 0.24.20

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
registry.gitlab.com/dyff/dyff-operator :0.24.20	e9ca51627601	golang.org/x/net@v0.44.0 stdlib@go1.24.13	0.55.0 1.25.13

Open the chart page →

273

gethdysnix

1.1.2

1 of 1 See more

geth dysnix 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ethereum/client-go :v1.14.8	886ec69b35b0	golang.org/x/net@v0.24.0 stdlib@go1.22.6	0.55.0 1.25.13

Open the chart page →

1,627

jenkinsedu

2.7.1

1 of 2 See more

jenkins edu 2.7.1

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
jenkins/jenkins :lts	c1e4c349365f	golang.org/x/net@v0.38.0 stdlib@go1.25.3	0.55.0 1.25.13

Open the chart page →

4,496

glpieftechcombr-glpi

2.12.1

1 of 5 See more

glpi eftechcombr-glpi 2.12.1

1 of the 5 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/mariadb :12.3.2	a02fe89cb597	stdlib@go1.24.6	1.25.13

Open the chart page →

4,620

egagenteginnovations

0.10.0

1 of 1 See more

egagent eginnovations 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
eginnovations/agent :7.5.4	e4dfe242fe9f	stdlib@go1.26.4	1.25.13

Open the chart page →

1,357

glideeinstack

0.0.2

1 of 1 See more

glide einstack 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/einstack/glide :0.0.1-alpine	ab3f7d0a1d50	golang.org/x/net@v0.19.0 stdlib@go1.21.6	0.55.0 1.25.13

Open the chart page →

1,335

elchi-discoveryelchi

1.0.0

1 of 1 See more

elchi-discovery elchi 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
jhonbrownn/elchi-discovery :latest	8f6551ecc98c	golang.org/x/net@v0.13.0 stdlib@go1.23.1	0.55.0 1.25.13

Open the chart page →

638

Container images carrying it

5,331 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/grafana/alloy-operator :1.12.1	4ee4b71cf16a	stdlib@go1.26.4	1.25.13	1
ghcr.io/grafana/alloy-operator :1.8.1	ae85d68749c7	golang.org/x/net@v0.49.0 stdlib@go1.25.8	0.55.0 1.25.13	1
ghcr.io/grafana/grafana-operator :v5.18.0	0af2faec9d6f	golang.org/x/net@v0.38.0 stdlib@go1.24.2	0.55.0 1.25.13	1
ghcr.io/grafana/grafana-operator :v5.22.2	d45fc24e8f43	golang.org/x/net@v0.51.0 stdlib@go1.26.1	0.55.0 1.25.13	1
ghcr.io/grafana/helm-chart-toolbox-kubectl :0.1.2	c7adcc4db378	golang.org/x/net@v0.30.0 stdlib@go1.24.9	0.55.0 1.25.13	1
ghcr.io/grafana/k6-operator :controller-v1.6.0	ba7f0fc1e22e	stdlib@go1.26.5	1.25.13	1
ghcr.io/grafana/k8s-injection-controller :0.2.0	c5bad40655a3	stdlib@go1.26.5	1.25.13	1
ghcr.io/grafana/tempo-operator/tempo-operator :v0.4.0	2627be646391	golang.org/x/net@v0.12.0 stdlib@go1.21.0	0.55.0 1.25.13	1
ghcr.io/grycap/oscar :latest	0c58ff972451	golang.org/x/net@v0.51.0 stdlib@go1.25.11	0.55.0 1.25.13	1
ghcr.io/gurucomputing/headscale-ui :2026.03.17	015f5ba04bcb	golang.org/x/net@v0.42.0 stdlib@go1.25.8	0.55.0 1.25.13	1
ghcr.io/guydavis/machinaris :test	50a71a30f18e	stdlib@go1.26.5	1.25.13	1
ghcr.io/haedalwang/kubescout :0.1.1	07d51f838f0d	golang.org/x/net@v0.48.0 stdlib@go1.25.5	0.55.0 1.25.13	1
ghcr.io/happymooguild/wardn-backend :0.1.0	23ee1b8cfc3c	stdlib@go1.26.5	1.25.13	1
ghcr.io/haydercyber/secrets-bridge :0.2.0	4709f1bb3039	golang.org/x/net@v0.47.0 stdlib@go1.24.13	0.55.0 1.25.13	1
ghcr.io/headlamp-k8s/headlamp :v0.43.0	5d03caa26df7	stdlib@go1.26.3	1.25.13	1
ghcr.io/heimops/mimir-operator :latest	4e1a3ef1fe82	golang.org/x/net@v0.17.0 stdlib@go1.24.13	0.55.0 1.25.13	1
ghcr.io/helm/chartmuseum :v0.16.0	71d1f1c0179e	golang.org/x/net@v0.10.0 stdlib@go1.20.4	0.55.0 1.25.13	1
ghcr.io/helm/chartmuseum :v0.14.0	878ef6a31fa0	golang.org/x/net@v0.0.0-20220121210141-e204ce36a2ba stdlib@go1.17.6	0.55.0 1.25.13	1
ghcr.io/helm/chartmuseum :v0.15.0	c298183a5208	golang.org/x/net@v0.0.0-20220531201128-c960675eff93 stdlib@go1.17.8	0.55.0 1.25.13	1
ghcr.io/helm/chartmuseum :v0.16.3	c81f105c3682	golang.org/x/net@v0.38.0 stdlib@go1.24.1	0.55.0 1.25.13	1
ghcr.io/helmfile/helmfile :v1.8.0	1808ffb76f37	golang.org/x/net@v0.39.0 stdlib@go1.26.4	0.55.0 1.25.13	1
ghcr.io/henrywhitaker3/argo-zombies :v0.4.4	316c397906c9	golang.org/x/net@v0.47.0 stdlib@go1.26.1	0.55.0 1.25.13	1
ghcr.io/home-assistant/home-assistant :2025.3.0	26c51e44d932	stdlib@go1.23.3	1.25.13	1
ghcr.io/home-assistant/home-assistant :2026.9.0	372d991e5888	golang.org/x/net@v0.49.0 stdlib@go1.25.6	0.55.0 1.25.13	1
ghcr.io/home-assistant/home-assistant :2026.8.2	56690a89c79a	golang.org/x/net@v0.49.0 stdlib@go1.23.3	0.55.0 1.25.13	1
ghcr.io/home-assistant/home-assistant :2025.12.5	9a5a3eb4a213	golang.org/x/net@v0.46.0 stdlib@go1.25.4	0.55.0 1.25.13	1
ghcr.io/home-assistant/home-assistant :2026.9.2	a1bc133af84e	golang.org/x/net@v0.49.0 stdlib@go1.25.6	0.55.0 1.25.13	1
ghcr.io/home-assistant/home-assistant :2022.5.4	ec6d67fbedfa	stdlib@go1.17.1	1.25.13	1
ghcr.io/home-assistant/home-assistant :2023.11.3	feffc0b8227d	stdlib@go1.17.1	1.25.13	1
ghcr.io/home-operations/home-assistant :2026.3.1	067e54e2e107	golang.org/x/net@v0.49.0 stdlib@go1.25.6	0.55.0 1.25.13	1
ghcr.io/honeycombio/kspan/kspan :0.2	c966a4f8a4b7	golang.org/x/net@v0.0.0-20201021035429-f5854403a974 stdlib@go1.20.1	0.55.0 1.25.13	1
ghcr.io/hsn723/cert-estuary :0.2.0	0c4b6132b0ad	golang.org/x/net@v0.53.0 stdlib@go1.26.2	0.55.0 1.25.13	1
ghcr.io/hsn723/dkim-manager :1.4.0	0312232b31a2	golang.org/x/net@v0.50.0 stdlib@go1.26.0	0.55.0 1.25.13	1
ghcr.io/hsn723/postfix_exporter :0.20.0	b7da7c554018	golang.org/x/net@v0.53.0 stdlib@go1.26.2	0.55.0 1.25.13	1
ghcr.io/huseyinbabal/kubetag :latest	e161eddc59a0	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.55.0 1.25.13	1
ghcr.io/hyperspike/valkey-operator :v0.0.61	7d8c669f11a4	golang.org/x/net@v0.44.0 stdlib@go1.25.2	0.55.0 1.25.13	1
ghcr.io/idebeijer/gameserver-operator :latest	1b099cfe9e5e	golang.org/x/net@v0.49.0 stdlib@go1.25.7	0.55.0 1.25.13	1
ghcr.io/ignisda/ryot :v10.5.0	a752b6aee537	golang.org/x/net@v0.33.0 stdlib@go1.23.1	0.55.0 1.25.13	1
ghcr.io/igrikus/garm-operator :4.2.0	9e24d8a6a3b2	golang.org/x/net@v0.53.0 stdlib@go1.26.2	0.55.0 1.25.13	1
ghcr.io/imcitius/checker-edge :1.1.11	74426c1fe00f	golang.org/x/net@v0.50.0 stdlib@go1.25.9	0.55.0 1.25.13	1
ghcr.io/imgproxy/imgproxy :v3.30.0	74c1bee92e04	golang.org/x/net@v0.44.0 stdlib@go1.25.1	0.55.0 1.25.13	1
ghcr.io/imunhatep/kube-node-ready :0.5.0	7439f6f9f85c	golang.org/x/net@v0.43.0 stdlib@go1.25.7	0.55.0 1.25.13	1
ghcr.io/indeedeng/harbor-container-webhook :main	45ca15fc294f	golang.org/x/net@v0.37.0 stdlib@go1.24.1	0.55.0 1.25.13	1
ghcr.io/infrafence/infrafence-agent :1.0.0	d22095ee8a1a	golang.org/x/net@v0.47.0	0.55.0	1
ghcr.io/inlets/inlets-operator :0.17.22	08265c006973	golang.org/x/net@v0.52.0 stdlib@go1.26.2	0.55.0 1.25.13	1
ghcr.io/interlink-hq/interlink/virtual-kubelet-inttw :latest	0e05a7b49c33	golang.org/x/net@v0.38.0 stdlib@go1.24.5	0.55.0 1.25.13	1
ghcr.io/invergent-ai/surogate-hub :latest	6d4106724d56	golang.org/x/net@v0.43.0 stdlib@go1.24.13	0.55.0 1.25.13	1
ghcr.io/ioxie/velkir/manager :v0.1.2	02c657d62d1d	stdlib@go1.26.5	1.25.13	1
ghcr.io/itakurah/kubernetes-event-exporter :v1.7	8abb52b66557	golang.org/x/net@v0.17.0 stdlib@go1.20.14	0.55.0 1.25.13	1
ghcr.io/it-at-m/appswitcher-server :1.3.0	10006bc0f309	golang.org/x/net@v0.39.0 stdlib@go1.24.3	0.55.0 1.25.13	1