CVE-2026-39821

High

Advisory

Published 22 May 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 8.2; base score, highest
EPSS: 0.007; 51st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 4,528; of 17,803 indexed, latest versions
Container images: 5,282; deployed by those charts
Fix available: 3 of 3; affected packages

Red Hat Security Advisory: git-lfs security update

Carried by container images the latest versions of 4,528 of 17,803 indexed charts deploy, on 5,282 images.

Affected package	Affected versions	Fixed in	Images
git-lfsrpm	2.13.3-3.el8_6	0:3.4.1-11.el8_10	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+190 more	1.25.13	5,243
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+220 more	0.55.0	3,683

OSV records: RHSA-2026:30853 GO-2026-5026

Charts affected

4,528 by stars

Chart

Latest

Affected images

Radar Score

giteanovum-rgi-charts

2.1.3

1 of 3 See more

gitea novum-rgi-charts 2.1.3

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
gitea/gitea :1.13.0	d5ab14cd29af	golang.org/x/net@v0.0.0-20200904194848-62affa334b73 stdlib@go1.15.5	0.55.0 1.25.13

Open the chart page →

4,862

nfs-server-provisionernovum-rgi-charts

1.1.2

1 of 1 See more

nfs-server-provisioner novum-rgi-charts 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
quay.io/kubernetes_incubator/nfs-provisioner :v2.3.0	f402e6039b3c	golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc stdlib@go1.13.4	0.55.0 1.25.13

Open the chart page →

2,806

example-dev-toolsnoygal

0.2.8

1 of 3 See more

example-dev-tools noygal 0.2.8

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
linuxserver/cloud9 :latest	45c5fe102ff3	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b stdlib@go1.17.11	0.55.0 1.25.13

Open the chart page →

27,560

nri-plugin-runtimenri-plugin-runtime

0.0.3

1 of 1 See more

nri-plugin-runtime nri-plugin-runtime 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/bodgit/nri-plugin-runtime :v0.0.3	130c0b1b6fa3	stdlib@go1.26.4	1.25.13

Open the chart page →

154

nri-memory-policynri-plugins

0.14.0

1 of 1 See more

nri-memory-policy nri-plugins 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/containers/nri-plugins/nri-memory-policy :v0.14.0	531d21ec4ba2	stdlib@go1.26.0	1.25.13

Open the chart page →

272

nri-memory-qosnri-plugins

0.14.0

1 of 1 See more

nri-memory-qos nri-plugins 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/containers/nri-plugins/nri-memory-qos :v0.14.0	c7c5c24ed894	stdlib@go1.26.0	1.25.13

Open the chart page →

272

nri-resctrl-monnri-plugins

0.14.0

1 of 1 See more

nri-resctrl-mon nri-plugins 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/containers/nri-plugins/nri-resctrl-mon :v0.14.0	a9c9775fab70	stdlib@go1.26.0	1.25.13

Open the chart page →

272

nri-resource-annotatornri-plugins

0.14.0

1 of 1 See more

nri-resource-annotator nri-plugins 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/containers/nri-plugins/nri-resource-annotator :v0.14.0	8100a19e85f7	stdlib@go1.26.0	1.25.13

Open the chart page →

235

nri-resource-policy-templatenri-plugins

0.14.0

1 of 1 See more

nri-resource-policy-template nri-plugins 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/containers/nri-plugins/nri-resource-policy-template :v0.14.0	0edfc075277b	stdlib@go1.26.0	1.25.13

Open the chart page →

303

nri-sgx-epcnri-plugins

0.14.0

1 of 1 See more

nri-sgx-epc nri-plugins 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/containers/nri-plugins/nri-sgx-epc :v0.14.0	b4c4d0d83c14	stdlib@go1.26.0	1.25.13

Open the chart page →

272

nri-volume-qosnri-volume-qos

0.1.3

1 of 1 See more

nri-volume-qos nri-volume-qos 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
quay.io/piraeusdatastore/nri-volume-qos :v0.1.3	cbe3e1ea2b6a	golang.org/x/net@v0.54.0 stdlib@go1.26.4	0.55.0 1.25.13

Open the chart page →

216

cnaos-pvc-populatornutanix-helm-releases

1.1.0-174-prod

1 of 2 See more

cnaos-pvc-populator nutanix-helm-releases 1.1.0-174-prod

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/volume-data-source-validator :v1.0.0	d35884236461	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.3	0.55.0 1.25.13

Open the chart page →

1,838

nai-knative-istio-controllernutanix-helm-releases

1.13.1

2 of 2 See more

nai-knative-istio-controller nutanix-helm-releases 1.13.1

2 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
gcr.io/knative-releases/knative.dev/net-istio/cmd/controller :v1.13.1	a5b041ba3c9e	golang.org/x/net@v0.20.0 stdlib@go1.21.5	0.55.0 1.25.13
gcr.io/knative-releases/knative.dev/net-istio/cmd/webhook :v1.13.1	f066376eee17	golang.org/x/net@v0.20.0 stdlib@go1.21.5	0.55.0 1.25.13

Open the chart page →

1,566

nai-knative-servingnutanix-helm-releases

1.13.1

4 of 4 See more

nai-knative-serving nutanix-helm-releases 1.13.1

4 of the 4 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
gcr.io/knative-releases/knative.dev/serving/cmd/activator :v1.13.1	21f8e11a44bf	golang.org/x/net@v0.20.0 stdlib@go1.21.5	0.55.0 1.25.13
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler :v1.13.1	34796e9f760b	golang.org/x/net@v0.20.0 stdlib@go1.21.5	0.55.0 1.25.13
gcr.io/knative-releases/knative.dev/serving/cmd/controller :v1.13.1	53d9aa4d2c7a	golang.org/x/net@v0.20.0 stdlib@go1.21.5	0.55.0 1.25.13
gcr.io/knative-releases/knative.dev/serving/cmd/webhook :v1.13.1	700c69915dc7	golang.org/x/net@v0.20.0 stdlib@go1.21.5	0.55.0 1.25.13

Open the chart page →

3,766

nutanix-core-files-cluster-operatornutanix-helm-releases

1.1.0

1 of 1 See more

nutanix-core-files-cluster-operator nutanix-helm-releases 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
nutanix/cn-rwx-operator :1.1.0	0082e0cebd42	stdlib@go1.25.12	1.25.13

Open the chart page →

324

nutanix-flow-cninutanix-helm-releases

1.1.0

4 of 7 See more

nutanix-flow-cni nutanix-helm-releases 1.1.0

4 of the 7 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/nats :2.10-alpine	b83efabe3e7d	stdlib@go1.24.2	1.25.13
natsio/nats-box :0.14.1	a67913df95f1	golang.org/x/net@v0.15.0 stdlib@go1.21.3	0.55.0 1.25.13
natsio/nats-server-config-reloader :0.13.0	b3359eeb10bf	stdlib@go1.20.5	1.25.13
ghcr.io/k8snetworkplumbingwg/multus-cni :v4.1.3	9751856cacc8	golang.org/x/net@v0.23.0 stdlib@go1.21.13	0.55.0 1.25.13

Open the chart page →

4,997

gpu-operatornvidia-gpu-operator

26.7.0

1 of 2 See more

gpu-operator nvidia-gpu-operator 26.7.0

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
registry.k8s.io/nfd/node-feature-discovery :v0.19.0	2fa1c99ad09b	stdlib@go1.26.3	1.25.13

Open the chart page →

245

dnscrypt-proxyobeone

1.4.5

1 of 1 See more

dnscrypt-proxy obeone 1.4.5

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
klutchell/dnscrypt-proxy :2.1.18	a98e8d13314f	stdlib@go1.25.12	1.25.13

Open the chart page →

firecrawlobeone

3.0.6

2 of 5 See more

firecrawl obeone 3.0.6

2 of the 5 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/firecrawl/firecrawl :2.11.349	ddbbb3023fea	golang.org/x/net@v0.41.0 stdlib@go1.24.13	0.55.0 1.25.13
ghcr.io/firecrawl/nuq-postgres :latest	f9388bd25ae2	stdlib@go1.24.6	1.25.13

Open the chart page →

10,311

observabilitysecobservabilitysec

0.0.1

1 of 2 See more

observabilitysec observabilitysec 0.0.1

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
jdvalencia422/observabilitysec :latest	a80b6e47a7b8	stdlib@go1.18.4	1.25.13

Open the chart page →

1,179

lensoci-ai-incubations

0.1.14

11 of 16 See more

lens oci-ai-incubations 0.1.14

11 of the 16 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
alpine/k8s :1.31.10	6dbe6f391eda	golang.org/x/net@v0.19.0 stdlib@go1.22.7	0.55.0 1.25.13
grafana/grafana :12.1.1	a1701c218024	golang.org/x/net@v0.41.0 stdlib@go1.24.6	0.55.0 1.25.13
library/postgres :13	4689940c6838	stdlib@go1.24.6	1.25.13
quay.io/jetstack/cert-manager-cainjector :v1.13.2	858fee0c4af0	golang.org/x/net@v0.17.0 stdlib@go1.20.10	0.55.0 1.25.13
quay.io/jetstack/cert-manager-controller :v1.13.2	9c67cf8c92d8	golang.org/x/net@v0.17.0 stdlib@go1.20.10	0.55.0 1.25.13
quay.io/jetstack/cert-manager-webhook :v1.13.2	0a9470447ebf	golang.org/x/net@v0.17.0 stdlib@go1.20.10	0.55.0 1.25.13
quay.io/prometheus-operator/prometheus-config-reloader :v0.85.0	ebb560bcb6bd	golang.org/x/net@v0.43.0 stdlib@go1.24.6	0.55.0 1.25.13
quay.io/prometheus/prometheus :v3.5.0	63805ebb8d2b	golang.org/x/net@v0.41.0 stdlib@go1.24.5	0.55.0 1.25.13
quay.io/prometheus/pushgateway :v1.11.1	03738d278e08	golang.org/x/net@v0.36.0 stdlib@go1.24.1	0.55.0 1.25.13
registry.k8s.io/ingress-nginx/controller :v1.13.2	1f7eaeb01933	golang.org/x/net@v0.43.0 stdlib@go1.24.6	0.55.0 1.25.13
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.6.2	050a34002d5b	golang.org/x/net@v0.43.0 stdlib@go1.24.6	0.55.0 1.25.13

Open the chart page →

17,257

oci-prometheus-sd-proxyoci-prometheus-sd-proxy

1.0.0

1 of 1 See more

oci-prometheus-sd-proxy oci-prometheus-sd-proxy 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/amaanx86/oci-prometheus-sd-proxy :latest	297a8379a328	stdlib@go1.26.4	1.25.13

Open the chart page →

285

ocisocis-community

0.1.0

1 of 1 See more

ocis ocis-community 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
owncloud/ocis :8.0.1	b38fd8fdd58f	golang.org/x/net@v0.48.0 stdlib@go1.25.7	0.55.0 1.25.13

Open the chart page →

2,356

argocd-agent-addonocm-helm-charts

0.29.0

1 of 2 See more

argocd-agent-addon ocm-helm-charts 0.29.0

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
quay.io/argoprojlabs/argocd-operator :v0.18.0	a09814522a72	golang.org/x/net@v0.49.0 stdlib@go1.25.10	0.55.0 1.25.13

Open the chart page →

671

cluster-gateway-addon-managerocm-helm-charts

1.4.0

1 of 1 See more

cluster-gateway-addon-manager ocm-helm-charts 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
oamdev/cluster-gateway-addon-manager :v1.4.0	1bcae00bd7b0	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.10	0.55.0 1.25.13

Open the chart page →

1,607

cluster-managerocm-helm-charts

1.3.1

1 of 1 See more

cluster-manager ocm-helm-charts 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
quay.io/open-cluster-management/registration-operator :v1.3.1	df6c926a2b54	golang.org/x/net@v0.52.0 stdlib@go1.25.10	0.55.0 1.25.13

Open the chart page →

822

cluster-proxyocm-helm-charts

0.12.0

1 of 1 See more

cluster-proxy ocm-helm-charts 0.12.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
quay.io/open-cluster-management/cluster-proxy :v0.12.0	35f9c3ad644a	golang.org/x/net@v0.23.0 stdlib@go1.22.4	0.55.0 1.25.13

Open the chart page →

1,350

dynamic-scoring-frameworkocm-helm-charts

0.1.0

2 of 2 See more

dynamic-scoring-framework ocm-helm-charts 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
quay.io/open-cluster-management/dynamic-scoring-addon :latest	7e571a08ec1a	golang.org/x/net@v0.47.0 stdlib@go1.24.13	0.55.0 1.25.13
quay.io/open-cluster-management/dynamic-scoring-controller :latest	587f5bc8f2ed	golang.org/x/net@v0.47.0 stdlib@go1.24.13	0.55.0 1.25.13

Open the chart page →

996

klusterletocm-helm-charts

1.3.1

1 of 1 See more

klusterlet ocm-helm-charts 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
quay.io/open-cluster-management/registration-operator :v1.3.1	df6c926a2b54	golang.org/x/net@v0.52.0 stdlib@go1.25.10	0.55.0 1.25.13

Open the chart page →

822

kueue-addonocm-helm-charts

0.1.4

1 of 1 See more

kueue-addon ocm-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
quay.io/open-cluster-management/kueue-addon :v0.1.4	7f728514fead	golang.org/x/net@v0.38.0 stdlib@go1.24.6	0.55.0 1.25.13

Open the chart page →

1,619

multicluster-controlplaneocm-helm-charts

0.8.0

1 of 1 See more

multicluster-controlplane ocm-helm-charts 0.8.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
quay.io/open-cluster-management/multicluster-controlplane :latest	9888240f644b	golang.org/x/net@v0.52.0 stdlib@go1.26.4	0.55.0 1.25.13

Open the chart page →

626

multicluster-meshocm-helm-charts

0.0.2

1 of 1 See more

multicluster-mesh ocm-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
quay.io/open-cluster-management/multicluster-mesh-addon :latest	3e010e1188f1	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.19.13	0.55.0 1.25.13

Open the chart page →

2,131

octantoctant

0.1.86

1 of 1 See more

octant octant 0.1.86

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/mydecisive/octant :0.1.86	ebbd44abae6c	golang.org/x/net@v0.52.0	0.55.0

Open the chart page →

566

my-bloody-jenkinsodavid

0.1.218

1 of 1 See more

my-bloody-jenkins odavid 0.1.218

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
odavid/my-bloody-jenkins :2.462.3-306	e7ab3bbc948e	golang.org/x/net@v0.21.0 stdlib@go1.22.5	0.55.0 1.25.13

Open the chart page →

5,812

aspromokgolove

2.0.0

1 of 1 See more

asprom okgolove 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
okgolove/asprom :1.10.1	974d2e5eb150	stdlib@go1.14.11	1.25.13

Open the chart page →

1,869

cmsmsoleds-helm-charts

0.1.6

1 of 1 See more

cmsms oleds-helm-charts 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
bitnamilegacy/mariadb :11.4.7-debian-12-r2	90dc6acb7b2e	stdlib@go1.23.10	1.25.13

Open the chart page →

2,899

hive-metastoreolehrgf

0.1.0

1 of 1 See more

hive-metastore olehrgf 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/melodyyangaws/hive-metastore :3.0.0	e949b0f733f0	golang.org/x/net@v0.0.0-20191112182307-2180aed22343 stdlib@go1.13.4	0.55.0 1.25.13

Open the chart page →

8,549

paperless-ngxoli-the-dev

1.1.1

1 of 1 See more

paperless-ngx oli-the-dev 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/paperless-ngx/paperless-ngx :3.1.3	aa810a36942c	stdlib@go1.24.4	1.25.13

Open the chart page →

4,679

exposecontrollerolli-ai

1.0.5

1 of 1 See more

exposecontroller olli-ai 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
olliai/exposecontroller :1.0.5	a470d96525e4	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.16.3	0.55.0 1.25.13

Open the chart page →

2,861

k8s-replicatorolli-ai

1.3.0

1 of 1 See more

k8s-replicator olli-ai 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
olliai/k8s-replicator :1.3.0	5716f2a8bd4c	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.17.2	0.55.0 1.25.13

Open the chart page →

2,825

apicurioone-acre-fund

2.3.0

2 of 5 See more

apicurio one-acre-fund 2.3.0

2 of the 5 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :14.4.0-debian-11-r23	7e7ebb082031	stdlib@go1.16.7	1.25.13
jwilder/dockerize :latest	f94fb59fb4f6	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.55.0 1.25.13

Open the chart page →

18,671

nocodbone-acre-fund

0.4.6

2 of 3 See more

nocodb one-acre-fund 0.4.6

2 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/postgres :alpine	d3e1620b530c	stdlib@go1.24.6	1.25.13
nocodb/nocodb :0.258.0	6779a4ddedf2	golang.org/x/net@v0.19.0 stdlib@go1.21.10	0.55.0 1.25.13

Open the chart page →

4,241

onedevonedev

11.9.0

1 of 1 See more

onedev onedev 11.9.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
1dev/server :11.9.0	cd5b12fe5471	golang.org/x/net@v0.38.0 stdlib@go1.23.8	0.55.0 1.25.13

Open the chart page →

6,148

one-green-coreone-green-core

0.0.7

3 of 8 See more

one-green-core one-green-core 0.0.7

3 of the 8 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
grafana/grafana :8.5.3	ecc1b80b8ca2	golang.org/x/net@v0.0.0-20211118161319-6a13c67c3ce4 stdlib@go1.17.9	0.55.0 1.25.13
library/influxdb :2.0.8	ba10ac9ba17a	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.16.5	0.55.0 1.25.13
library/telegraf :1.20.4	28e98eece020	golang.org/x/net@v0.0.0-20211005215030-d2e5035098b3 stdlib@go1.17.3	0.55.0 1.25.13

Open the chart page →

9,582

ontoserverontoserver

0.5.2

1 of 2 See more

ontoserver ontoserver 0.5.2

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/postgres :16	f1c3376c26f2	stdlib@go1.24.6	1.25.13

Open the chart page →

1,686

onyx-stackonyx

0.3.1

4 of 12 See more

onyx-stack onyx 0.3.1

4 of the 12 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
vespaengine/vespa :8.526.15	69b160f58211	golang.org/x/net@v0.39.0 stdlib@go1.24.2	0.55.0 1.25.13
ghcr.io/kedacore/keda :2.17.2	72dc058e478d	golang.org/x/net@v0.38.0 stdlib@go1.23.8	0.55.0 1.25.13
ghcr.io/kedacore/keda-admission-webhooks :2.17.2	c8227c6edb4d	golang.org/x/net@v0.38.0 stdlib@go1.23.8	0.55.0 1.25.13
ghcr.io/kedacore/keda-metrics-apiserver :2.17.2	f312f50ddc57	golang.org/x/net@v0.38.0 stdlib@go1.23.8	0.55.0 1.25.13

Open the chart page →

6,697

oom-traceroom-tracer

0.1.0

1 of 1 See more

oom-tracer oom-tracer 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/eminaktas/oom-tracer :v0.1.0	c90ca8389c87	golang.org/x/net@v0.38.0 stdlib@go1.25.1	0.55.0 1.25.13

Open the chart page →

1,125

opa-nginxopa-nginx

0.0.3

2 of 2 See more

opa-nginx opa-nginx 0.0.3

2 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
openpolicyagent/opa :0.53.1	6a58dea59933	golang.org/x/net@v0.10.0 stdlib@go1.20.4	0.55.0 1.25.13
richardjennings/opa-nginx :0.0.3	66424aca125d	stdlib@go1.20.5	1.25.13

Open the chart page →

2,207

open-cacheopen-cache

0.1.0

1 of 1 See more

open-cache open-cache 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/atolat/open-cache :latest	d6105dd73eb4	stdlib@go1.25.8	1.25.13

Open the chart page →

447

raspberrymaticopenccu

3.83.6

1 of 1 See more

raspberrymatic openccu 3.83.6

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/jens-maus/raspberrymatic :3.83.6.20250824	4b22b4f407c4	golang.org/x/net@v0.40.0 stdlib@go1.24.4	0.55.0 1.25.13

Open the chart page →

2,424

Container images carrying it

5,282 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
coredns/coredns :1.13.1	9b9128672209	golang.org/x/net@v0.45.0 stdlib@go1.25.2	0.55.0 1.25.13	2
crate/crate_adapter :latest	b8d89fa5d19b	golang.org/x/net@v0.0.0-20210423184538-5f58ad60dda6 stdlib@go1.16.3	0.55.0 1.25.13	2
cs3org/revad :v1.19.0	3b57a34a7dfd	golang.org/x/net@v0.0.0-20220325170049-de3da57026de stdlib@go1.17.3	0.55.0 1.25.13	2
cs3org/revad :v1.24.0	e80a4d67b352	golang.org/x/net@v0.7.0 stdlib@go1.20.4	0.55.0 1.25.13	2
csiplugin/csi-qingcloud :v1.4.0	0766163dc046	golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc stdlib@go1.19.13	0.55.0 1.25.13	2
danielfm/aws-limits-exporter :0.6.0	7152b84e57cb	stdlib@go1.17.2	1.25.13	2
danielqsj/kafka-exporter :v1.9.0	4150e46b2e96	golang.org/x/net@v0.34.0 stdlib@go1.24.0	0.55.0 1.25.13	2
danielqsj/kafka-exporter :latest	a51b280b55a7	golang.org/x/net@v0.51.0 stdlib@go1.26.2	0.55.0 1.25.13	2
datawire/aes :1.14.4	8588eafe6862	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.15	0.55.0 1.25.13	2
devopsfaith/krakend :latest	f8bdaa8a1a43	golang.org/x/net@v0.36.0 stdlib@go1.24.2	0.55.0 1.25.13	2
dmilhdef/missing-container-metrics :v0.21.0	fada1a6e7638	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.16.2	0.55.0 1.25.13	2
drone/drone-runner-kube :1.0.0-rc.3	4359bf2bb3dc	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.16.15	0.55.0 1.25.13	2
dtzar/helm-kubectl :3.14.4	55429449408e	golang.org/x/net@v0.22.0 stdlib@go1.21.8	0.55.0 1.25.13	2
dunglas/mercure :v0 :v0.24.2	916834e49961	stdlib@go1.26.3	1.25.13	2
epamedp/cd-pipeline-operator :2.32.0	fc858071b7a1	stdlib@go1.25.12	1.25.13	2
epamedp/codebase-operator :2.35.0	295a008abcef	stdlib@go1.25.12	1.25.13	2
epamedp/edp-tekton :0.27.0	88189f16f94b	stdlib@go1.25.12	1.25.13	2
epamedp/gitfusion :0.6.1	0b7eb7d5ca43	stdlib@go1.25.12	1.25.13	2
eqalpha/keydb :latest	6537505c4235	stdlib@go1.16.7	1.25.13	2
eqalpha/keydb :x86_64_v6.3.4	eceb1806730c	stdlib@go1.16.7	1.25.13	2
falcosecurity/falco-driver-loader :0.33.1	1fe583eee4af	stdlib@go1.18.6	1.25.13	2
falcosecurity/falco-no-driver :0.33.1	0d427b8d5fc6	stdlib@go1.18.6	1.25.13	2
filebrowser/filebrowser :v2.23.0	86e8449ff8ff	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.18.3	0.55.0 1.25.13	2
filebrowser/filebrowser :latest :v2.63.23	a469ea076d4a	stdlib@go1.26.5	1.25.13	2
free5gc/amf :v3.4.3	1bc96ff5a2a6	golang.org/x/net@v0.24.0 stdlib@go1.21.8	0.55.0 1.25.13	2
free5gc/ausf :v3.4.3	687ff4daf5da	golang.org/x/net@v0.23.0 stdlib@go1.21.8	0.55.0 1.25.13	2
free5gc/chf :v3.4.3	e2a4dd98a4ed	golang.org/x/net@v0.24.0 stdlib@go1.21.8	0.55.0 1.25.13	2
free5gc/nrf :v3.4.3	99e46b860efb	golang.org/x/net@v0.23.0 stdlib@go1.21.8	0.55.0 1.25.13	2
free5gc/nssf :v3.4.3	dfe8c68c04b4	golang.org/x/net@v0.23.0 stdlib@go1.21.8	0.55.0 1.25.13	2
free5gc/pcf :v3.4.3	f712e8ecd927	golang.org/x/net@v0.23.0 stdlib@go1.21.8	0.55.0 1.25.13	2
free5gc/smf :v3.4.3	60e38baa4b10	golang.org/x/net@v0.23.0 stdlib@go1.21.8	0.55.0 1.25.13	2
free5gc/udm :v3.4.3	2f68df062a50	golang.org/x/net@v0.23.0 stdlib@go1.21.8	0.55.0 1.25.13	2
free5gc/udr :v3.4.3	c0783bcdcbdc	golang.org/x/net@v0.23.0 stdlib@go1.21.8	0.55.0 1.25.13	2
free5gc/upf :v3.4.3	b6b362a39fdd	golang.org/x/net@v0.23.0 stdlib@go1.21.8	0.55.0 1.25.13	2
free5gc/webui :v3.4.3	9adeb18492cb	golang.org/x/net@v0.23.0 stdlib@go1.21.8	0.55.0 1.25.13	2
freikin/dawarich :1.14.5	11826c67e4b1	stdlib@go1.24.4	1.25.13	2
friendsofgo/killgrave :0.4.1	39cfbecca342	stdlib@go1.16.3	1.25.13	2
garugaru/aws-cloudwatch-exporter :latest	541852cafda5	stdlib@go1.16.15	1.25.13	2
githubexporter/github-exporter :v2.3.1	a36fbedeedf8	stdlib@go1.26.4	1.25.13	2
goelankit/cortex-gateway :v1.1.0	0d9a82dcf026	golang.org/x/net@v0.0.0-20220403103023-749bd193bc2b stdlib@go1.18	0.55.0 1.25.13	2
gotenberg/gotenberg :8.36.0	87c16b9f3642	stdlib@go1.26.5	1.25.13	2
gotson/komga :1.26.3	6c2a967bbe9a	stdlib@go1.26.5	1.25.13	2
governify/dashboard :latest	e83a17ba5038	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985 stdlib@go1.17	0.55.0 1.25.13	2
grafana/agent-operator :v0.25.1	a136c6208aa3	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18	0.55.0 1.25.13	2
grafana/alloy :v1.8.1	7790f6f7fbd8	golang.org/x/net@v0.37.0 stdlib@go1.24.1	0.55.0 1.25.13	2
grafana/alloy :v1.12.2	f94b1c82957a	golang.org/x/net@v0.46.0 stdlib@go1.25.5	0.55.0 1.25.13	2
grafana/grafana :9.2.4	057896e23443	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591 stdlib@go1.19.3	0.55.0 1.25.13	2
grafana/grafana :11.1.0	079600c9517b	golang.org/x/net@v0.26.0 stdlib@go1.22.4	0.55.0 1.25.13	2
grafana/grafana :12.3.1	2175aaa91c96	golang.org/x/net@v0.46.0 stdlib@go1.25.5	0.55.0 1.25.13	2
grafana/grafana :8.5.0	42d3e6bc1865	golang.org/x/net@v0.0.0-20211118161319-6a13c67c3ce4 stdlib@go1.17.9	0.55.0 1.25.13	2