CVE-2026-39821

High

Advisory

Published 22 May 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 8.2; base score, highest
EPSS: 0.007; 51st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 4,643; of 17,821 indexed, latest versions
Container images: 5,380; deployed by those charts
Fix available: 3 of 3; affected packages

Red Hat Security Advisory: git-lfs security update

Carried by container images the latest versions of 4,643 of 17,821 indexed charts deploy, on 5,380 images.

Affected package	Affected versions	Fixed in	Images
git-lfsrpm	2.13.3-3.el8_6	0:3.4.1-11.el8_10	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+193 more	1.25.13	5,337
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+220 more	0.55.0	3,758

OSV records: RHSA-2026:30853 GO-2026-5026

Charts affected

4,643 by stars

Chart

Latest

Affected images

Radar Score

firehoseblip-firehose

0.0.18

3 of 11 See more

firehose blip-firehose 0.0.18

3 of the 11 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
blipai/deckard :0.0.28	737d5d19a312	golang.org/x/net@v0.10.0 stdlib@go1.18.10	0.55.0 1.25.13
hashicorp/vault :1.15.2	6b4e5dadf082	golang.org/x/net@v0.17.0 stdlib@go1.21.3	0.55.0 1.25.13
hashicorp/vault-k8s :1.3.1	5d74a885ae3e	golang.org/x/net@v0.17.0 stdlib@go1.21.3	0.55.0 1.25.13

Open the chart page →

13,551

blob-csi-driverblob-csi-driver

1.27.9

1 of 5 See more

blob-csi-driver blob-csi-driver 1.27.9

1 of the 5 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/oss/v2/kubernetes-csi/blob-csi :v1.27.9	f99f5f7ae5fb	stdlib@go1.26.4	1.25.13

Open the chart page →

382

bnkrbnkr

1.0.5

1 of 2 See more

15,345

colosseumbook-k8sinfra-v2

1.0.18

1 of 5 See more

colosseum book-k8sinfra-v2 1.0.18

1 of the 5 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
sysnet4admin/colosseum-nti :log	c947c3629371	stdlib@go1.23.12	1.25.13

Open the chart page →

27,611

csi-driver-nfsbook-k8sinfra-v2

4.12.1

6 of 6 See more

csi-driver-nfs book-k8sinfra-v2 4.12.1

6 of the 6 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.15.0	11f199f6bec4	golang.org/x/net@v0.40.0 stdlib@go1.24.6	0.55.0 1.25.13
registry.k8s.io/sig-storage/csi-provisioner :v5.3.0	bb057f866177	golang.org/x/net@v0.40.0 stdlib@go1.24.2	0.55.0 1.25.13
registry.k8s.io/sig-storage/csi-resizer :v1.14.0	5e7cbb63fd49	golang.org/x/net@v0.39.0 stdlib@go1.24.2	0.55.0 1.25.13
registry.k8s.io/sig-storage/csi-snapshotter :v8.3.0	bc7be893ecc3	golang.org/x/net@v0.39.0 stdlib@go1.24.2	0.55.0 1.25.13
registry.k8s.io/sig-storage/livenessprobe :v2.17.0	9b75b9ade162	golang.org/x/net@v0.40.0 stdlib@go1.24.6	0.55.0 1.25.13
registry.k8s.io/sig-storage/nfsplugin :v4.11.0	ce5b5ccd5eb0	golang.org/x/net@v0.37.0 stdlib@go1.23.6	0.55.0 1.25.13

Open the chart page →

6,312

grafanabook-k8sinfra-v2

8.8.2

1 of 1 See more

grafana book-k8sinfra-v2 8.8.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
grafana/grafana :11.4.0	d8ea37798ccc	golang.org/x/net@v0.29.0 stdlib@go1.23.1	0.55.0 1.25.13

Open the chart page →

1,825

jaegerbook-k8sinfra-v2

3.4.0

4 of 5 See more

jaeger book-k8sinfra-v2 3.4.0

4 of the 5 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-agent :1.53.0	0214a0ef24b1	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.55.0 1.25.13
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	stdlib@go1.18.2	1.25.13
jaegertracing/jaeger-collector :1.53.0	7f1269222903	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.55.0 1.25.13
jaegertracing/jaeger-query :1.53.0	049bb0d64ea3	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.55.0 1.25.13

Open the chart page →

19,390

jenkinsbook-k8sinfra-v2

5.1.12

1 of 2 See more

jenkins book-k8sinfra-v2 5.1.12

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
jenkins/jenkins :2.440.3-jdk17	de4fea113221	golang.org/x/net@v0.17.0 stdlib@go1.21.8	0.55.0 1.25.13

Open the chart page →

8,400

kube-prometheus-stackbook-k8sinfra-v2

65.5.1

5 of 6 See more

kube-prometheus-stack book-k8sinfra-v2 65.5.1

5 of the 6 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
grafana/grafana :11.2.2-security-01	464eac539793	golang.org/x/net@v0.28.0 stdlib@go1.22.7	0.55.0 1.25.13
quay.io/prometheus-operator/prometheus-operator :v0.77.2	af92db7eac86	golang.org/x/net@v0.29.0 stdlib@go1.23.2	0.55.0 1.25.13
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/net@v0.23.0 stdlib@go1.22.5	0.55.0 1.25.13
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20221220-controller-v1.5.1-58-g787ea74b6	4d99688e5573	golang.org/x/net@v0.1.0 stdlib@go1.19.4	0.55.0 1.25.13
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.13.0	639a1e2da549	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.55.0 1.25.13

Open the chart page →

6,066

metallbbook-k8sinfra-v2

0.13.10

2 of 3 See more

metallb book-k8sinfra-v2 0.13.10

2 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
quay.io/metallb/controller :v0.13.10	1b33357b3595	golang.org/x/net@v0.8.0 stdlib@go1.19.5	0.55.0 1.25.13
quay.io/metallb/speaker :v0.13.10	00406ccb1fa0	golang.org/x/net@v0.8.0 stdlib@go1.19.5	0.55.0 1.25.13

Open the chart page →

3,857

nfs-subdir-external-provisionerbook-k8sinfra-v2

4.0.18

1 of 1 See more

nfs-subdir-external-provisioner book-k8sinfra-v2 4.0.18

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner :v4.0.0	3ce0fdba4d8e	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.15	0.55.0 1.25.13

Open the chart page →

2,746

prometheusbook-k8sinfra-v2

26.0.1

6 of 6 See more

prometheus book-k8sinfra-v2 26.0.1

6 of the 6 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
prom/prometheus :v3.0.1	565ee8650122	golang.org/x/net@v0.30.0 stdlib@go1.23.3	0.55.0 1.25.13
quay.io/prometheus-operator/prometheus-config-reloader :v0.78.2	944b2c67345c	golang.org/x/net@v0.30.0 stdlib@go1.23.3	0.55.0 1.25.13
quay.io/prometheus/alertmanager :v0.27.0	e13b6ed5cb92	golang.org/x/net@v0.20.0 stdlib@go1.21.7	0.55.0 1.25.13
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/net@v0.23.0 stdlib@go1.22.5	0.55.0 1.25.13
quay.io/prometheus/pushgateway :v1.10.0	7a4d0696a24e	golang.org/x/net@v0.28.0 stdlib@go1.23.1	0.55.0 1.25.13
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.14.0	37d841299325	golang.org/x/net@v0.29.0 stdlib@go1.23.3	0.55.0 1.25.13

Open the chart page →

5,324

pyroscopebook-k8sinfra-v2

1.10.0

3 of 3 See more

pyroscope book-k8sinfra-v2 1.10.0

3 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.1.1	c3dac4e26471	golang.org/x/net@v0.24.0 stdlib@go1.22.3	0.55.0 1.25.13
grafana/pyroscope :1.10.0	319bf32ae06b	golang.org/x/net@v0.26.0 stdlib@go1.22.7	0.55.0 1.25.13
ghcr.io/jimmidyson/configmap-reload :v0.12.0	a7c754986900	stdlib@go1.21.1	1.25.13

Open the chart page →

3,268

redisbook-k8sinfra-v2

1.0.0

1 of 1 See more

redis book-k8sinfra-v2 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/redis :7.0.4	091a7b5de688	stdlib@go1.16.7	1.25.13

Open the chart page →

1,732

tempobook-k8sinfra-v2

1.10.3

1 of 1 See more

tempo book-k8sinfra-v2 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
grafana/tempo :2.5.0	f0200a9bff6d	golang.org/x/net@v0.24.0 stdlib@go1.21.3	0.55.0 1.25.13

Open the chart page →

1,877

boundary-softsciboundary-softsci

0.2.4

1 of 1 See more

boundary-softsci boundary-softsci 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
hashicorp/boundary :latest	76a201954ca0	golang.org/x/net@v0.48.0 stdlib@go1.25.7	0.55.0 1.25.13

Open the chart page →

879

branchdbbranch-db

0.1.4

2 of 3 See more

branchdb branch-db 0.1.4

2 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/masucchi/branchdb :0.1.4	7ea1820c1da1	stdlib@go1.26.4	1.25.13
ghcr.io/masucchi/branchdb-operator :0.1.4	c16578615a43	stdlib@go1.26.4	1.25.13

Open the chart page →

517

bitmagnetbrandan-schmitz-helm-charts

1.0.6

2 of 2 See more

bitmagnet brandan-schmitz-helm-charts 1.0.6

2 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/postgres :16-alpine	721873c34ceb	stdlib@go1.24.6	1.25.13
ghcr.io/bitmagnet-io/bitmagnet :v0.10.0	cf2c16fac5b5	golang.org/x/net@v0.34.0 stdlib@go1.23.6	0.55.0 1.25.13

Open the chart page →

1,684

Filebrowserbrandan-schmitz-helm-charts

1.3.1

1 of 1 See more

Filebrowser brandan-schmitz-helm-charts 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
filebrowser/filebrowser :v2.63.15-s6	dbac07403040	stdlib@go1.26.4	1.25.13

Open the chart page →

989

pagesbrian-pages

1.0.0

1 of 3 See more

pages brian-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.13

Open the chart page →

20,287

pagesbrixton-mayuribhavsar23-pages

1.0.0

1 of 3 See more

pages brixton-mayuribhavsar23-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.13

Open the chart page →

20,287

pagesbrixton-pages

1.0.0

1 of 3 See more

pages brixton-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.13

Open the chart page →

20,287

tautullibryanalves

0.1.0

1 of 1 See more

tautulli bryanalves 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
tautulli/tautulli :latest	670e68dd9efc	stdlib@go1.24.4	1.25.13

Open the chart page →

1,956

node-appbryopsida

0.5.1

1 of 2 See more

node-app bryopsida 0.5.1

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/bryopsida/k8s-dev-pod :main	82d0b161161d	golang.org/x/net@v0.38.0 stdlib@go1.24.3	0.55.0 1.25.13

Open the chart page →

73,199

plexbryopsida

0.2.0

1 of 1 See more

plex bryopsida 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/plex :latest	7f9a1d574958	stdlib@go1.26.5	1.25.13

Open the chart page →

876

buildkitbuildkit

0.1.0

1 of 1 See more

buildkit buildkit 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
moby/buildkit :master-rootless	07115a67cd22	golang.org/x/net@v0.53.0 stdlib@go1.25.7	0.55.0 1.25.13

Open the chart page →

620

buildkit-privilegedbuildkit-privileged

0.1.0

1 of 1 See more

buildkit-privileged buildkit-privileged 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
moby/buildkit :master	bc964521ee58	golang.org/x/net@v0.50.0 stdlib@go1.25.7	0.55.0 1.25.13

Open the chart page →

403

category-microservicebusi-ads

1.0.0

1 of 2 See more

category-microservice busi-ads 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/mongo :latest	5d7043a4ffe0	stdlib@go1.26.5	1.25.13

Open the chart page →

11,605

butane-operatorbutane-operator

0.3.0

2 of 2 See more

butane-operator butane-operator 0.3.0

2 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/naval-group/butane-operator :v0.1.1-rc2	85818b510780	golang.org/x/net@v0.49.0 stdlib@go1.26.0	0.55.0 1.25.13
registry.k8s.io/kubebuilder/kube-rbac-proxy :v0.16.0	771a9a173e03	golang.org/x/net@v0.21.0 stdlib@go1.21.7	0.55.0 1.25.13

Open the chart page →

1,411

butlercibutlerci

0.1.0

1 of 1 See more

butlerci butlerci 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
etejeda/butlerci :0.1.0	737d58183abc	golang.org/x/net@v0.0.0-20200822124328-c89045814202 stdlib@go1.16.3	0.55.0 1.25.13

Open the chart page →

2,375

accelerationbuttahtoast

0.1.0

1 of 1 See more

acceleration buttahtoast 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
goharbor/harbor-acceld :0.2.13	451103a6c8d8	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.55.0 1.25.13

Open the chart page →

1,409

fluobuttahtoast

0.1.0

1 of 1 See more

fluo buttahtoast 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/flatcar/flatcar-linux-update-operator :v0.10.0-rc1	f9063e20b1f6	golang.org/x/net@v0.8.0 stdlib@go1.20.6	0.55.0 1.25.13

Open the chart page →

1,299

kubermatic-operatorbuttahtoast

2.24.5

1 of 1 See more

kubermatic-operator buttahtoast 2.24.5

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
quay.io/kubermatic/kubermatic :v2.24.5	ebba936046ab	golang.org/x/net@v0.19.0 stdlib@go1.20.6	0.55.0 1.25.13

Open the chart page →

2,781

kubevirt-managerbuttahtoast

0.1.3

1 of 1 See more

kubevirt-manager buttahtoast 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
kubevirtmanager/kubevirt-manager :1.3.3	df3ea27d4a9e	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.55.0 1.25.13

Open the chart page →

1,497

mariadbbysamio

1.0.2

1 of 1 See more

mariadb bysamio 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/mariadb :12.0.2	607835cd628b	stdlib@go1.24.6	1.25.13

Open the chart page →

2,978

miniobysamio

1.0.3

1 of 1 See more

minio bysamio 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2025-09-07T16-13-09Z	14cea493d9a3	golang.org/x/net@v0.39.0 stdlib@go1.24.6	0.55.0 1.25.13

Open the chart page →

1,201

payloadboxbytefork

0.0.4

1 of 1 See more

payloadbox bytefork 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/bytefork/payloadbox :0.0.7	3e0164e975b3	stdlib@go1.26.3	1.25.13

Open the chart page →

caddycaddy

0.0.4

1 of 1 See more

caddy caddy 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/caddy :2.11.2-alpine	834468128c76	golang.org/x/net@v0.51.0 stdlib@go1.26.0	0.55.0 1.25.13

Open the chart page →

1,706

etcdcagriekin

0.1.5

1 of 1 See more

etcd cagriekin 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
quay.io/coreos/etcd :v3.5.16	d967d98a12dc	golang.org/x/net@v0.23.0 stdlib@go1.22.7	0.55.0 1.25.13

Open the chart page →

907

kafkacagriekin

0.2.0

1 of 2 See more

kafka cagriekin 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
danielqsj/kafka-exporter :v1.9.0	4150e46b2e96	golang.org/x/net@v0.34.0 stdlib@go1.24.0	0.55.0 1.25.13

Open the chart page →

2,404

rediscagriekin

1.5.2

1 of 2 See more

redis cagriekin 1.5.2

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
oliver006/redis_exporter :v1.67.0	120f7ec77293	stdlib@go1.23.4	1.25.13

Open the chart page →

1,428

ct-singlecalltelemetry

0.8.4

4 of 7 See more

ct-single calltelemetry 0.8.4

4 of the 7 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/nats :2.8.4-alpine	988010f74b61	stdlib@go1.17.10	1.25.13
natsio/nats-box :0.11.0	9fbf7bf684e4	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2 stdlib@go1.18.1	0.55.0 1.25.13
natsio/nats-server-config-reloader :0.7.2	911ce7ed2f55	stdlib@go1.19	1.25.13
natsio/prometheus-nats-exporter :0.10.0	16048afb67a5	stdlib@go1.19	1.25.13

Open the chart page →

10,714

stablecalltelemetry

0.7.1

4 of 9 See more

stable calltelemetry 0.7.1

4 of the 9 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/nats :2.8.4-alpine	988010f74b61	stdlib@go1.17.10	1.25.13
natsio/nats-box :0.11.0	9fbf7bf684e4	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2 stdlib@go1.18.1	0.55.0 1.25.13
natsio/nats-server-config-reloader :0.7.2	911ce7ed2f55	stdlib@go1.19	1.25.13
natsio/prometheus-nats-exporter :0.10.0	16048afb67a5	stdlib@go1.19	1.25.13

Open the chart page →

7,706

stable-hacalltelemetry

0.11.4

3 of 7 See more

stable-ha calltelemetry 0.11.4

3 of the 7 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/nats :2.10.12-alpine	bca70839d953	stdlib@go1.21.8	1.25.13
natsio/nats-box :0.14.2	e808e0644ce1	golang.org/x/net@v0.17.0 stdlib@go1.21.5	0.55.0 1.25.13
natsio/nats-server-config-reloader :0.14.1	0d50270fa374	stdlib@go1.20.5	1.25.13

Open the chart page →

4,706

pagescamden-pages

1.0.0

1 of 3 See more

pages camden-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.13

Open the chart page →

20,287

camellia-redis-proxycamellia-redis-proxy

1.4.0

1 of 2 See more

camellia-redis-proxy camellia-redis-proxy 1.4.0

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/redis :5.0	fc5ecd863862	stdlib@go1.16.7	1.25.13

Open the chart page →

8,129

geoservercamptocamp2

0.0.3

1 of 12 See more

geoserver camptocamp2 0.0.3

1 of the 12 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/postgres :12	2f2a8c2a7d10	stdlib@go1.18.2	1.25.13

Open the chart page →

88,815

bucket-clonercamptocamp3

1.0.4

1 of 1 See more

bucket-cloner camptocamp3 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
camptocamp/bucket-cloner :latest	acfafc308d88	golang.org/x/net@v0.0.0-20210415231046-e915ea6b2b7d stdlib@go1.16.5	0.55.0 1.25.13

Open the chart page →

4,527

getconfigcamptocamp3

0.1.1

1 of 1 See more

getconfig camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
quay.io/oauth2-proxy/oauth2-proxy :v7.3.0	8c21390be87d	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2 stdlib@go1.17.10	0.55.0 1.25.13

Open the chart page →

2,202

prometheus-puppetdb-sdcamptocamp3

8.0.2

1 of 2 See more

prometheus-puppetdb-sd camptocamp3 8.0.2

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/camptocamp/prometheus-puppetdb-sd :0.14.0	414c0c99fd06	golang.org/x/net@v0.34.0 stdlib@go1.23.5	0.55.0 1.25.13

Open the chart page →

6,189

Container images carrying it

5,380 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/kubedb/kubedb-kibana :v0.42.0	735dd5d2709d	stdlib@go1.25.12	1.25.13	1
ghcr.io/kubedb/kubedb-ops-manager :v0.27.1	ec36422b09af	golang.org/x/net@v0.17.0 stdlib@go1.20.14	0.55.0 1.25.13	1
ghcr.io/kubedb/kubedb-provisioner :v0.40.2	42574f512837	golang.org/x/net@v0.17.0 stdlib@go1.20.14	0.55.0 1.25.13	1
ghcr.io/kubedb/kubedb-schema-manager :v0.42.0	4e2a3cce7ce8	stdlib@go1.25.12	1.25.13	1
ghcr.io/kubedb/kubedb-schema-manager :v0.16.0	9518de37eed5	golang.org/x/net@v0.17.0 stdlib@go1.20.7	0.55.0 1.25.13	1
ghcr.io/kubedb/kubedb-ui-server :v0.42.0	e93dfe7454d4	stdlib@go1.25.12	1.25.13	1
ghcr.io/kubedb/kubedb-webhook-server :v0.16.2	e24894e32cbc	golang.org/x/net@v0.17.0 stdlib@go1.20.14	0.55.0 1.25.13	1
ghcr.io/kubedb/migrator-operator :v0.5.0	98ffb48f5b60	stdlib@go1.25.11	1.25.13	1
ghcr.io/kubedb/provider-aws :v0.27.0	49b1c312e342	golang.org/x/net@v0.7.0 stdlib@go1.20.7	0.55.0 1.25.13	1
ghcr.io/kubedb/provider-azure :v0.27.0	aa0c8526ae5e	golang.org/x/net@v0.0.0-20220927171203-f486391704dc stdlib@go1.19.3	0.55.0 1.25.13	1
ghcr.io/kubedb/provider-gcp :v0.27.0	a1d4cf8b8fe1	golang.org/x/net@v0.23.0 stdlib@go1.19.1	0.55.0 1.25.13	1
ghcr.io/kubeelasti/elasti-operator :0.1.30	3b2a972a0284	stdlib@go1.26.5	1.25.13	1
ghcr.io/kubeelasti/elasti-resolver :0.1.30	db3cd41d28ed	stdlib@go1.26.5	1.25.13	1
ghcr.io/kubeflow/spark-operator/controller :2.2.1	865ff4da5686	golang.org/x/net@v0.38.0 stdlib@go1.24.1	0.55.0 1.25.13	1
ghcr.io/kubeform/provider-aws :v0.0.1	e3d1f1302e49	golang.org/x/net@v0.10.0 stdlib@go1.19.1	0.55.0 1.25.13	1
ghcr.io/kubeform/provider-azure :v0.0.1	ac8459f70f85	golang.org/x/net@v0.0.0-20220927171203-f486391704dc stdlib@go1.20.5	0.55.0 1.25.13	1
ghcr.io/kubeform/provider-gcp :v0.0.1	af77073c184f	golang.org/x/net@v0.9.0 stdlib@go1.19.9	0.55.0 1.25.13	1
ghcr.io/kubelauncher/cassandra	b66aba320083	stdlib@go1.26.5	1.25.13	1
ghcr.io/kubelauncher/etcd	8ab954711fb9	stdlib@go1.26.5	1.25.13	1
ghcr.io/kubelauncher/kafka	43e1085cd0a8	stdlib@go1.26.5	1.25.13	1
ghcr.io/kubelauncher/keycloak	afe3bd73d7cf	stdlib@go1.26.5	1.25.13	1
ghcr.io/kubelauncher/kubectl	7280594a2f18	golang.org/x/net@v0.49.0 stdlib@go1.26.5	0.55.0 1.25.13	1
ghcr.io/kubelauncher/mariadb	e25056a6ec52	stdlib@go1.26.5	1.25.13	1
ghcr.io/kubelauncher/memcached	b599ca6b3ff3	stdlib@go1.26.5	1.25.13	1
ghcr.io/kubelauncher/mongodb	9bc37ed78a8b	golang.org/x/net@v0.47.0 stdlib@go1.25.9	0.55.0 1.25.13	1
ghcr.io/kubelauncher/mysql	e9609bd50416	stdlib@go1.26.5	1.25.13	1
ghcr.io/kubelauncher/postgresql	1a27e11e5925	stdlib@go1.26.5	1.25.13	1
ghcr.io/kubelauncher/rabbitmq	ff5a36a457f1	stdlib@go1.22.2	1.25.13	1
ghcr.io/kubelauncher/redis	bcd8e9a6224f	stdlib@go1.26.5	1.25.13	1
ghcr.io/kubelauncher/zookeeper	7826e9caa461	stdlib@go1.26.5	1.25.13	1
ghcr.io/kube-logging/log-generator :v0.4.1	05aa441b20aa	stdlib@go1.20.1	1.25.13	1
ghcr.io/kube-logging/log-generator :v0.6.0	8324bbc0ec08	golang.org/x/net@v0.7.0 stdlib@go1.20.4	0.55.0 1.25.13	1
ghcr.io/kube-logging/logging-operator :4.2.2	0dd85dcb1f73	golang.org/x/net@v0.10.0 stdlib@go1.20.5	0.55.0 1.25.13	1
ghcr.io/kube-logging/logging-operator :6.7.0	df10e783095e	stdlib@go1.26.3	1.25.13	1
ghcr.io/kubenetworks/kubevpn :v2.11.9	3feb9da85270	golang.org/x/net@v0.52.0	0.55.0	1
ghcr.io/kubepattern/kubepattern :0.0.5	0762baa6d9b0	golang.org/x/net@v0.47.0 stdlib@go1.25.8	0.55.0 1.25.13	1
ghcr.io/kubereboot/kured :1.23.0	8dfd3c2e8893	stdlib@go1.26.4	1.25.13	1
ghcr.io/kuberecord/kuberecord :v0.4.0	2a19792ad2ec	golang.org/x/net@v0.50.0	0.55.0	1
ghcr.io/kubeservice-stack/customlimitrange-manager :v1.3.0	d3ed97d142d4	golang.org/x/net@v0.36.0 stdlib@go1.24.1	0.55.0 1.25.13	1
ghcr.io/kubeshop/botkube :v1.0.0	669e27a5d1af	golang.org/x/net@v0.7.0 stdlib@go1.19.7	0.55.0 1.25.13	1
ghcr.io/kubeshop/botkube :v1.14.0	c6fe64c7bfcd	golang.org/x/net@v0.23.0 stdlib@go1.21.13	0.55.0 1.25.13	1
ghcr.io/kubestash/kubestash :v0.29.0	0686b2a40280	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.55.0 1.25.13	1
ghcr.io/kubestellar/console :v0.3.42	89610ec0cbda	golang.org/x/net@v0.23.0 stdlib@go1.26.3	0.55.0 1.25.13	1
ghcr.io/kubetail-org/kubetail-cluster-agent :0.7.1	a5eee8cab215	golang.org/x/net@v0.38.0 stdlib@go1.24.2	0.55.0 1.25.13	1
ghcr.io/kubetail-org/kubetail-cluster-api :0.8.2	8e6acd0da9ac	golang.org/x/net@v0.52.0 stdlib@go1.25.8	0.55.0 1.25.13	1
ghcr.io/kubetail-org/kubetail-dashboard :0.17.0	8617f0a7f703	golang.org/x/net@v0.52.0 stdlib@go1.25.8	0.55.0 1.25.13	1
ghcr.io/kubevault/vault-operator :v0.24.0	0087cb49616f	golang.org/x/net@v0.48.0 stdlib@go1.25.9	0.55.0 1.25.13	1
ghcr.io/kube-vip/kube-vip :v1.2.3	2fcdbb014a2e	stdlib@go1.26.5	1.25.13	1
ghcr.io/kubewall/kubewall :0.0.23	d9a03cfb557b	golang.org/x/net@v0.53.0 stdlib@go1.26.4	0.55.0 1.25.13	1
ghcr.io/kubiks-inc/kubiks-k8s-agent :latest	8611f74b4b99	golang.org/x/net@v0.34.0 stdlib@go1.23.10	0.55.0 1.25.13	1