CVE-2026-39821

High

Advisory

Published 22 May 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 8.2; base score, highest
EPSS: 0.007; 51st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 4,643; of 17,821 indexed, latest versions
Container images: 5,380; deployed by those charts
Fix available: 3 of 3; affected packages

Red Hat Security Advisory: git-lfs security update

Carried by container images the latest versions of 4,643 of 17,821 indexed charts deploy, on 5,380 images.

Affected package	Affected versions	Fixed in	Images
git-lfsrpm	2.13.3-3.el8_6	0:3.4.1-11.el8_10	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+193 more	1.25.13	5,337
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+220 more	0.55.0	3,758

OSV records: RHSA-2026:30853 GO-2026-5026

Charts affected

4,643 by stars

Chart

Latest

Affected images

Radar Score

firehoseblip-firehose

0.0.18

3 of 11 See more

firehose blip-firehose 0.0.18

3 of the 11 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
blipai/deckard :0.0.28	737d5d19a312	golang.org/x/net@v0.10.0 stdlib@go1.18.10	0.55.0 1.25.13
hashicorp/vault :1.15.2	6b4e5dadf082	golang.org/x/net@v0.17.0 stdlib@go1.21.3	0.55.0 1.25.13
hashicorp/vault-k8s :1.3.1	5d74a885ae3e	golang.org/x/net@v0.17.0 stdlib@go1.21.3	0.55.0 1.25.13

Open the chart page →

13,551

blob-csi-driverblob-csi-driver

1.27.9

1 of 5 See more

blob-csi-driver blob-csi-driver 1.27.9

1 of the 5 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/oss/v2/kubernetes-csi/blob-csi :v1.27.9	f99f5f7ae5fb	stdlib@go1.26.4	1.25.13

Open the chart page →

382

bnkrbnkr

1.0.5

1 of 2 See more

15,345

colosseumbook-k8sinfra-v2

1.0.18

1 of 5 See more

colosseum book-k8sinfra-v2 1.0.18

1 of the 5 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
sysnet4admin/colosseum-nti :log	c947c3629371	stdlib@go1.23.12	1.25.13

Open the chart page →

27,611

csi-driver-nfsbook-k8sinfra-v2

4.12.1

6 of 6 See more

csi-driver-nfs book-k8sinfra-v2 4.12.1

6 of the 6 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.15.0	11f199f6bec4	golang.org/x/net@v0.40.0 stdlib@go1.24.6	0.55.0 1.25.13
registry.k8s.io/sig-storage/csi-provisioner :v5.3.0	bb057f866177	golang.org/x/net@v0.40.0 stdlib@go1.24.2	0.55.0 1.25.13
registry.k8s.io/sig-storage/csi-resizer :v1.14.0	5e7cbb63fd49	golang.org/x/net@v0.39.0 stdlib@go1.24.2	0.55.0 1.25.13
registry.k8s.io/sig-storage/csi-snapshotter :v8.3.0	bc7be893ecc3	golang.org/x/net@v0.39.0 stdlib@go1.24.2	0.55.0 1.25.13
registry.k8s.io/sig-storage/livenessprobe :v2.17.0	9b75b9ade162	golang.org/x/net@v0.40.0 stdlib@go1.24.6	0.55.0 1.25.13
registry.k8s.io/sig-storage/nfsplugin :v4.11.0	ce5b5ccd5eb0	golang.org/x/net@v0.37.0 stdlib@go1.23.6	0.55.0 1.25.13

Open the chart page →

6,312

grafanabook-k8sinfra-v2

8.8.2

1 of 1 See more

grafana book-k8sinfra-v2 8.8.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
grafana/grafana :11.4.0	d8ea37798ccc	golang.org/x/net@v0.29.0 stdlib@go1.23.1	0.55.0 1.25.13

Open the chart page →

1,825

jaegerbook-k8sinfra-v2

3.4.0

4 of 5 See more

jaeger book-k8sinfra-v2 3.4.0

4 of the 5 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-agent :1.53.0	0214a0ef24b1	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.55.0 1.25.13
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	stdlib@go1.18.2	1.25.13
jaegertracing/jaeger-collector :1.53.0	7f1269222903	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.55.0 1.25.13
jaegertracing/jaeger-query :1.53.0	049bb0d64ea3	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.55.0 1.25.13

Open the chart page →

19,390

jenkinsbook-k8sinfra-v2

5.1.12

1 of 2 See more

jenkins book-k8sinfra-v2 5.1.12

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
jenkins/jenkins :2.440.3-jdk17	de4fea113221	golang.org/x/net@v0.17.0 stdlib@go1.21.8	0.55.0 1.25.13

Open the chart page →

8,400

kube-prometheus-stackbook-k8sinfra-v2

65.5.1

5 of 6 See more

kube-prometheus-stack book-k8sinfra-v2 65.5.1

5 of the 6 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
grafana/grafana :11.2.2-security-01	464eac539793	golang.org/x/net@v0.28.0 stdlib@go1.22.7	0.55.0 1.25.13
quay.io/prometheus-operator/prometheus-operator :v0.77.2	af92db7eac86	golang.org/x/net@v0.29.0 stdlib@go1.23.2	0.55.0 1.25.13
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/net@v0.23.0 stdlib@go1.22.5	0.55.0 1.25.13
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20221220-controller-v1.5.1-58-g787ea74b6	4d99688e5573	golang.org/x/net@v0.1.0 stdlib@go1.19.4	0.55.0 1.25.13
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.13.0	639a1e2da549	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.55.0 1.25.13

Open the chart page →

6,066

metallbbook-k8sinfra-v2

0.13.10

2 of 3 See more

metallb book-k8sinfra-v2 0.13.10

2 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
quay.io/metallb/controller :v0.13.10	1b33357b3595	golang.org/x/net@v0.8.0 stdlib@go1.19.5	0.55.0 1.25.13
quay.io/metallb/speaker :v0.13.10	00406ccb1fa0	golang.org/x/net@v0.8.0 stdlib@go1.19.5	0.55.0 1.25.13

Open the chart page →

3,857

nfs-subdir-external-provisionerbook-k8sinfra-v2

4.0.18

1 of 1 See more

nfs-subdir-external-provisioner book-k8sinfra-v2 4.0.18

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner :v4.0.0	3ce0fdba4d8e	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.15	0.55.0 1.25.13

Open the chart page →

2,746

prometheusbook-k8sinfra-v2

26.0.1

6 of 6 See more

prometheus book-k8sinfra-v2 26.0.1

6 of the 6 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
prom/prometheus :v3.0.1	565ee8650122	golang.org/x/net@v0.30.0 stdlib@go1.23.3	0.55.0 1.25.13
quay.io/prometheus-operator/prometheus-config-reloader :v0.78.2	944b2c67345c	golang.org/x/net@v0.30.0 stdlib@go1.23.3	0.55.0 1.25.13
quay.io/prometheus/alertmanager :v0.27.0	e13b6ed5cb92	golang.org/x/net@v0.20.0 stdlib@go1.21.7	0.55.0 1.25.13
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/net@v0.23.0 stdlib@go1.22.5	0.55.0 1.25.13
quay.io/prometheus/pushgateway :v1.10.0	7a4d0696a24e	golang.org/x/net@v0.28.0 stdlib@go1.23.1	0.55.0 1.25.13
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.14.0	37d841299325	golang.org/x/net@v0.29.0 stdlib@go1.23.3	0.55.0 1.25.13

Open the chart page →

5,324

pyroscopebook-k8sinfra-v2

1.10.0

3 of 3 See more

pyroscope book-k8sinfra-v2 1.10.0

3 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.1.1	c3dac4e26471	golang.org/x/net@v0.24.0 stdlib@go1.22.3	0.55.0 1.25.13
grafana/pyroscope :1.10.0	319bf32ae06b	golang.org/x/net@v0.26.0 stdlib@go1.22.7	0.55.0 1.25.13
ghcr.io/jimmidyson/configmap-reload :v0.12.0	a7c754986900	stdlib@go1.21.1	1.25.13

Open the chart page →

3,268

redisbook-k8sinfra-v2

1.0.0

1 of 1 See more

redis book-k8sinfra-v2 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/redis :7.0.4	091a7b5de688	stdlib@go1.16.7	1.25.13

Open the chart page →

1,732

tempobook-k8sinfra-v2

1.10.3

1 of 1 See more

tempo book-k8sinfra-v2 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
grafana/tempo :2.5.0	f0200a9bff6d	golang.org/x/net@v0.24.0 stdlib@go1.21.3	0.55.0 1.25.13

Open the chart page →

1,877

boundary-softsciboundary-softsci

0.2.4

1 of 1 See more

boundary-softsci boundary-softsci 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
hashicorp/boundary :latest	76a201954ca0	golang.org/x/net@v0.48.0 stdlib@go1.25.7	0.55.0 1.25.13

Open the chart page →

879

branchdbbranch-db

0.1.4

2 of 3 See more

branchdb branch-db 0.1.4

2 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/masucchi/branchdb :0.1.4	7ea1820c1da1	stdlib@go1.26.4	1.25.13
ghcr.io/masucchi/branchdb-operator :0.1.4	c16578615a43	stdlib@go1.26.4	1.25.13

Open the chart page →

517

bitmagnetbrandan-schmitz-helm-charts

1.0.6

2 of 2 See more

bitmagnet brandan-schmitz-helm-charts 1.0.6

2 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/postgres :16-alpine	721873c34ceb	stdlib@go1.24.6	1.25.13
ghcr.io/bitmagnet-io/bitmagnet :v0.10.0	cf2c16fac5b5	golang.org/x/net@v0.34.0 stdlib@go1.23.6	0.55.0 1.25.13

Open the chart page →

1,684

Filebrowserbrandan-schmitz-helm-charts

1.3.1

1 of 1 See more

Filebrowser brandan-schmitz-helm-charts 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
filebrowser/filebrowser :v2.63.15-s6	dbac07403040	stdlib@go1.26.4	1.25.13

Open the chart page →

989

pagesbrian-pages

1.0.0

1 of 3 See more

pages brian-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.13

Open the chart page →

20,287

pagesbrixton-mayuribhavsar23-pages

1.0.0

1 of 3 See more

pages brixton-mayuribhavsar23-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.13

Open the chart page →

20,287

pagesbrixton-pages

1.0.0

1 of 3 See more

pages brixton-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.13

Open the chart page →

20,287

tautullibryanalves

0.1.0

1 of 1 See more

tautulli bryanalves 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
tautulli/tautulli :latest	670e68dd9efc	stdlib@go1.24.4	1.25.13

Open the chart page →

1,956

node-appbryopsida

0.5.1

1 of 2 See more

node-app bryopsida 0.5.1

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/bryopsida/k8s-dev-pod :main	82d0b161161d	golang.org/x/net@v0.38.0 stdlib@go1.24.3	0.55.0 1.25.13

Open the chart page →

73,199

plexbryopsida

0.2.0

1 of 1 See more

plex bryopsida 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/plex :latest	7f9a1d574958	stdlib@go1.26.5	1.25.13

Open the chart page →

876

buildkitbuildkit

0.1.0

1 of 1 See more

buildkit buildkit 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
moby/buildkit :master-rootless	07115a67cd22	golang.org/x/net@v0.53.0 stdlib@go1.25.7	0.55.0 1.25.13

Open the chart page →

620

buildkit-privilegedbuildkit-privileged

0.1.0

1 of 1 See more

buildkit-privileged buildkit-privileged 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
moby/buildkit :master	bc964521ee58	golang.org/x/net@v0.50.0 stdlib@go1.25.7	0.55.0 1.25.13

Open the chart page →

403

category-microservicebusi-ads

1.0.0

1 of 2 See more

category-microservice busi-ads 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/mongo :latest	5d7043a4ffe0	stdlib@go1.26.5	1.25.13

Open the chart page →

11,605

butane-operatorbutane-operator

0.3.0

2 of 2 See more

butane-operator butane-operator 0.3.0

2 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/naval-group/butane-operator :v0.1.1-rc2	85818b510780	golang.org/x/net@v0.49.0 stdlib@go1.26.0	0.55.0 1.25.13
registry.k8s.io/kubebuilder/kube-rbac-proxy :v0.16.0	771a9a173e03	golang.org/x/net@v0.21.0 stdlib@go1.21.7	0.55.0 1.25.13

Open the chart page →

1,411

butlercibutlerci

0.1.0

1 of 1 See more

butlerci butlerci 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
etejeda/butlerci :0.1.0	737d58183abc	golang.org/x/net@v0.0.0-20200822124328-c89045814202 stdlib@go1.16.3	0.55.0 1.25.13

Open the chart page →

2,375

accelerationbuttahtoast

0.1.0

1 of 1 See more

acceleration buttahtoast 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
goharbor/harbor-acceld :0.2.13	451103a6c8d8	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.55.0 1.25.13

Open the chart page →

1,409

fluobuttahtoast

0.1.0

1 of 1 See more

fluo buttahtoast 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/flatcar/flatcar-linux-update-operator :v0.10.0-rc1	f9063e20b1f6	golang.org/x/net@v0.8.0 stdlib@go1.20.6	0.55.0 1.25.13

Open the chart page →

1,299

kubermatic-operatorbuttahtoast

2.24.5

1 of 1 See more

kubermatic-operator buttahtoast 2.24.5

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
quay.io/kubermatic/kubermatic :v2.24.5	ebba936046ab	golang.org/x/net@v0.19.0 stdlib@go1.20.6	0.55.0 1.25.13

Open the chart page →

2,781

kubevirt-managerbuttahtoast

0.1.3

1 of 1 See more

kubevirt-manager buttahtoast 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
kubevirtmanager/kubevirt-manager :1.3.3	df3ea27d4a9e	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.55.0 1.25.13

Open the chart page →

1,497

mariadbbysamio

1.0.2

1 of 1 See more

mariadb bysamio 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/mariadb :12.0.2	607835cd628b	stdlib@go1.24.6	1.25.13

Open the chart page →

2,978

miniobysamio

1.0.3

1 of 1 See more

minio bysamio 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2025-09-07T16-13-09Z	14cea493d9a3	golang.org/x/net@v0.39.0 stdlib@go1.24.6	0.55.0 1.25.13

Open the chart page →

1,201

payloadboxbytefork

0.0.4

1 of 1 See more

payloadbox bytefork 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/bytefork/payloadbox :0.0.7	3e0164e975b3	stdlib@go1.26.3	1.25.13

Open the chart page →

caddycaddy

0.0.4

1 of 1 See more

caddy caddy 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/caddy :2.11.2-alpine	834468128c76	golang.org/x/net@v0.51.0 stdlib@go1.26.0	0.55.0 1.25.13

Open the chart page →

1,706

etcdcagriekin

0.1.5

1 of 1 See more

etcd cagriekin 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
quay.io/coreos/etcd :v3.5.16	d967d98a12dc	golang.org/x/net@v0.23.0 stdlib@go1.22.7	0.55.0 1.25.13

Open the chart page →

907

kafkacagriekin

0.2.0

1 of 2 See more

kafka cagriekin 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
danielqsj/kafka-exporter :v1.9.0	4150e46b2e96	golang.org/x/net@v0.34.0 stdlib@go1.24.0	0.55.0 1.25.13

Open the chart page →

2,404

rediscagriekin

1.5.2

1 of 2 See more

redis cagriekin 1.5.2

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
oliver006/redis_exporter :v1.67.0	120f7ec77293	stdlib@go1.23.4	1.25.13

Open the chart page →

1,428

ct-singlecalltelemetry

0.8.4

4 of 7 See more

ct-single calltelemetry 0.8.4

4 of the 7 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/nats :2.8.4-alpine	988010f74b61	stdlib@go1.17.10	1.25.13
natsio/nats-box :0.11.0	9fbf7bf684e4	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2 stdlib@go1.18.1	0.55.0 1.25.13
natsio/nats-server-config-reloader :0.7.2	911ce7ed2f55	stdlib@go1.19	1.25.13
natsio/prometheus-nats-exporter :0.10.0	16048afb67a5	stdlib@go1.19	1.25.13

Open the chart page →

10,714

stablecalltelemetry

0.7.1

4 of 9 See more

stable calltelemetry 0.7.1

4 of the 9 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/nats :2.8.4-alpine	988010f74b61	stdlib@go1.17.10	1.25.13
natsio/nats-box :0.11.0	9fbf7bf684e4	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2 stdlib@go1.18.1	0.55.0 1.25.13
natsio/nats-server-config-reloader :0.7.2	911ce7ed2f55	stdlib@go1.19	1.25.13
natsio/prometheus-nats-exporter :0.10.0	16048afb67a5	stdlib@go1.19	1.25.13

Open the chart page →

7,706

stable-hacalltelemetry

0.11.4

3 of 7 See more

stable-ha calltelemetry 0.11.4

3 of the 7 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/nats :2.10.12-alpine	bca70839d953	stdlib@go1.21.8	1.25.13
natsio/nats-box :0.14.2	e808e0644ce1	golang.org/x/net@v0.17.0 stdlib@go1.21.5	0.55.0 1.25.13
natsio/nats-server-config-reloader :0.14.1	0d50270fa374	stdlib@go1.20.5	1.25.13

Open the chart page →

4,706

pagescamden-pages

1.0.0

1 of 3 See more

pages camden-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.13

Open the chart page →

20,287

camellia-redis-proxycamellia-redis-proxy

1.4.0

1 of 2 See more

camellia-redis-proxy camellia-redis-proxy 1.4.0

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/redis :5.0	fc5ecd863862	stdlib@go1.16.7	1.25.13

Open the chart page →

8,129

geoservercamptocamp2

0.0.3

1 of 12 See more

geoserver camptocamp2 0.0.3

1 of the 12 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/postgres :12	2f2a8c2a7d10	stdlib@go1.18.2	1.25.13

Open the chart page →

88,815

bucket-clonercamptocamp3

1.0.4

1 of 1 See more

bucket-cloner camptocamp3 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
camptocamp/bucket-cloner :latest	acfafc308d88	golang.org/x/net@v0.0.0-20210415231046-e915ea6b2b7d stdlib@go1.16.5	0.55.0 1.25.13

Open the chart page →

4,527

getconfigcamptocamp3

0.1.1

1 of 1 See more

getconfig camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
quay.io/oauth2-proxy/oauth2-proxy :v7.3.0	8c21390be87d	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2 stdlib@go1.17.10	0.55.0 1.25.13

Open the chart page →

2,202

prometheus-puppetdb-sdcamptocamp3

8.0.2

1 of 2 See more

prometheus-puppetdb-sd camptocamp3 8.0.2

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/camptocamp/prometheus-puppetdb-sd :0.14.0	414c0c99fd06	golang.org/x/net@v0.34.0 stdlib@go1.23.5	0.55.0 1.25.13

Open the chart page →

6,189

Container images carrying it

5,380 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/kubiyabot/agent-manager :v0.4.13	757bdd779345	golang.org/x/net@v0.39.0 stdlib@go1.23.12	0.55.0 1.25.13	1
ghcr.io/kubiyabot/kubernetes :1.32.0	b5ade0d9cc6b	golang.org/x/net@v0.30.0 stdlib@go1.22.10	0.55.0 1.25.13	1
ghcr.io/kubiyabot/kubiya-operator :runner_v2	6bf945565865	golang.org/x/net@v0.28.0 stdlib@go1.25.1	0.55.0 1.25.13	1
ghcr.io/kubiyabot/tool-manager :0.5.8	0cca6760763a	golang.org/x/net@v0.42.0 stdlib@go1.21.5	0.55.0 1.25.13	1
ghcr.io/kubiyabot/workflow-engine :v1.46.2	560a16a56d4e	golang.org/x/net@v0.39.0 stdlib@go1.23.12	0.55.0 1.25.13	1
ghcr.io/kuoss/eventrouter :v0.4.13	00b48beff3ae	golang.org/x/net@v0.38.0 stdlib@go1.23.12	0.55.0 1.25.13	1
ghcr.io/kuoss/eventrouter :v0.4.15	6226040e1346	golang.org/x/net@v0.38.0 stdlib@go1.24.10	0.55.0 1.25.13	1
ghcr.io/kuoss/ingress-annotator :v0.3.0	ae179f65d869	golang.org/x/net@v0.43.0 stdlib@go1.24.6	0.55.0 1.25.13	1
ghcr.io/kuoss/lethe :v0.3.1	c59f082ba8b2	golang.org/x/net@v0.41.0 stdlib@go1.23.12	0.55.0 1.25.13	1
ghcr.io/kuoss/lethe :v0.3.3	ebdf55fd5705	golang.org/x/net@v0.41.0 stdlib@go1.24.10	0.55.0 1.25.13	1
ghcr.io/kuoss/myip :v0.1.7	760f5ccae493	golang.org/x/net@v0.38.0 stdlib@go1.23.8	0.55.0 1.25.13	1
ghcr.io/kuoss/venti :v0.3.3	8ee3e70d77f1	golang.org/x/net@v0.42.0 stdlib@go1.24.10	0.55.0 1.25.13	1
ghcr.io/kvaps/kube-fencing-controller :v2.4.0	313edfec2fca	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18.8	0.55.0 1.25.13	1
ghcr.io/kvaps/kube-fencing-switcher :v2.4.0	f8c378e63b78	stdlib@go1.18.8	1.25.13	1
ghcr.io/kvaps/linstor-controller :v1.14.0	00ce11c31087	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.15.14	0.55.0 1.25.13	1
ghcr.io/kvaps/linstor-csi :v1.14.0	087618d16b83	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b stdlib@go1.15.14	0.55.0 1.25.13	1
ghcr.io/kvaps/linstor-ha-controller :v1.14.0	8e7b44bbd123	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15.14	0.55.0 1.25.13	1
ghcr.io/kvaps/linstor-stork :v1.14.0	5e409a6332b4	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b stdlib@go1.15.14	0.55.0 1.25.13	1
ghcr.io/kymaroshq/kymaros :0.6.9	fb3b88633381	golang.org/x/net@v0.50.0 stdlib@go1.25.9	0.55.0 1.25.13	1
ghcr.io/kyverno/background-controller :v1.12.5	06ed5db6cd33	golang.org/x/net@v0.22.0 stdlib@go1.21.12	0.55.0 1.25.13	1
ghcr.io/kyverno/cleanup-controller :v1.12.5	b914032ef9ad	golang.org/x/net@v0.22.0 stdlib@go1.21.12	0.55.0 1.25.13	1
ghcr.io/kyverno/kyverno :v1.7.1	9c73f1841ebc	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.17.9	0.55.0 1.25.13	1
ghcr.io/kyverno/kyverno :v1.12.5	a61c7022abcf	golang.org/x/net@v0.22.0 stdlib@go1.21.12	0.55.0 1.25.13	1
ghcr.io/kyverno/kyverno-cli :v1.12.5	832a32779e6d	golang.org/x/net@v0.22.0 stdlib@go1.21.12	0.55.0 1.25.13	1
ghcr.io/kyverno/kyvernopre :v1.7.1	185d2eebc60c	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.17.9	0.55.0 1.25.13	1
ghcr.io/kyverno/kyvernopre :v1.12.5	63f7eaf5aa8a	golang.org/x/net@v0.22.0 stdlib@go1.21.12	0.55.0 1.25.13	1
ghcr.io/kyverno/policy-reporter :2.14.1	e74c6bf33d1b	golang.org/x/net@v0.8.0 stdlib@go1.19.7	0.55.0 1.25.13	1
ghcr.io/kyverno/reports-controller :v1.12.5	c62e3347611c	golang.org/x/net@v0.22.0 stdlib@go1.21.12	0.55.0 1.25.13	1
ghcr.io/lablabs/cloudflare_exporter :0.0.16	70d74ec46602	golang.org/x/net@v0.25.0 stdlib@go1.22.3	0.55.0 1.25.13	1
ghcr.io/lavanet/lava/lavap :v2.5.0	89028adefcff	golang.org/x/net@v0.23.0 stdlib@go1.20.14	0.55.0 1.25.13	1
ghcr.io/layr-labs/eigenda/opr-node :0.8.4	6650119a385f	golang.org/x/net@v0.24.0 stdlib@go1.21.1	0.55.0 1.25.13	1
ghcr.io/layr-labs/eigenda/opr-nodeplugin :0.8.4	e459ad3ae758	golang.org/x/net@v0.24.0 stdlib@go1.21.1	0.55.0 1.25.13	1
ghcr.io/lbi22/trivy-webhook-elasticsearch :v0.1.4	b51b824e4f19	stdlib@go1.22.8	1.25.13	1
ghcr.io/leoquote/tencentcloud-exporter :master	ca51b6bb15dd	stdlib@go1.21.1	1.25.13	1
ghcr.io/leoquote/tencentcloud-info-exporter :main	d523c2c010cd	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.18.3	0.55.0 1.25.13	1
ghcr.io/lexfrei/extractedprism :v0.3.0	d10417753727	golang.org/x/net@v0.47.0 stdlib@go1.26.0	0.55.0 1.25.13	1
ghcr.io/liangyuanpeng/chirpstack-event-forward :v0.1.2	23dc6274cc4b	golang.org/x/net@v0.0.0-20210813160813-60bc85c4be6d stdlib@go1.17.10	0.55.0 1.25.13	1
ghcr.io/liangyuanpeng/replacer :v1.1.0	0b2a41c2a43e	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.17.7	0.55.0 1.25.13	1
ghcr.io/liangyuanpeng/waitfor :v1.0.0	ca5a98cbed32	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.7	0.55.0 1.25.13	1
ghcr.io/linkwarden/linkwarden :v2.16.3	0664c28a039b	stdlib@go1.23.7	1.25.13	1
ghcr.io/linuxoid69/school-bot :v0.3.3	c8872438f1e0	stdlib@go1.23.3	1.25.13	1
ghcr.io/linuxserver/calibre-web :latest	0767226fcf20	stdlib@go1.17.8	1.25.13	1
ghcr.io/linuxserver/calibre-web :0.6.26	7c0464228f2f	stdlib@go1.17.8	1.25.13	1
ghcr.io/linuxserver/code-server :version-v3.11.1	a385ba5cb161	stdlib@go1.16.4	1.25.13	1
ghcr.io/linuxserver/digikam :version-7.3.0	55b4c7f320ae	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.16.9	0.55.0 1.25.13	1
ghcr.io/linuxserver/doublecommander :version-0.8.2-1	d92969a929c2	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.16.9	0.55.0 1.25.13	1
ghcr.io/linuxserver/duplicati :latest	e1fdac6133ad	stdlib@go1.24.9	1.25.13	1
ghcr.io/linuxserver/filezilla :version-3.51.0-r1	5103cdd266ce	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b stdlib@go1.15.12	0.55.0 1.25.13	1
ghcr.io/linuxserver/mstream :version-v5.2.5	22c012bcc43c	golang.org/x/net@v0.0.0-20190827160401-ba9fcec4b297 stdlib@go1.15.5	0.55.0 1.25.13	1
ghcr.io/linuxserver/remmina :version-1.2.0-rcgit.29dfsg-1ubuntu1	05955792e00f	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f stdlib@go1.17.11	0.55.0 1.25.13	1