StackRadar

CVE-2026-39821

High

Advisory

Published 22 May 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.2
base score, highest
EPSS
0.007
51st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
4,650
of 17,832 indexed, latest versions
Container images
5,367
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: git-lfs security update

Carried by container images the latest versions of 4,650 of 17,832 indexed charts deploy, on 5,367 images.

Affected packageAffected versionsFixed inImages
git-lfsrpm2.13.3-3.el8_60:3.4.1-11.el8_101
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+193 more1.25.135,328
golang.org/x/netgolangv0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+222 more0.55.03,770
OSV records
RHSA-2026:30853GO-2026-5026

Charts affected

4,650 by stars
ChartLatestAffected imagesRadar Score
kueue-addonocm-helm-chartsVerified publisher0.1.41 of 1See more

kueue-addon ocm-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
quay.io/open-cluster-management/kueue-addon:v0.1.47f728514fead
golang.org/x/net@v0.38.0
stdlib@go1.24.6
0.55.0
1.25.13

Open the chart page →

1,618
multicluster-controlplaneocm-helm-chartsVerified publisher0.8.01 of 1See more

multicluster-controlplane ocm-helm-charts 0.8.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
quay.io/open-cluster-management/multicluster-controlplane:latest9888240f644b
golang.org/x/net@v0.52.0
stdlib@go1.26.4
0.55.0
1.25.13

Open the chart page →

626
multicluster-meshocm-helm-chartsVerified publisher0.0.21 of 1See more

multicluster-mesh ocm-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
quay.io/open-cluster-management/multicluster-mesh-addon:latest3e010e1188f1
golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd
stdlib@go1.19.13
0.55.0
1.25.13

Open the chart page →

2,132
octantoctant0.1.861 of 1See more

octant octant 0.1.86

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/mydecisive/octant:0.1.86ebbd44abae6c
golang.org/x/net@v0.52.0
0.55.0

Open the chart page →

566
my-bloody-jenkinsodavid0.1.2181 of 1See more

my-bloody-jenkins odavid 0.1.218

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
golang.org/x/net@v0.21.0
stdlib@go1.22.5
0.55.0
1.25.13

Open the chart page →

5,853
aspromokgoloveVerified publisher2.0.01 of 1See more

asprom okgolove 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
okgolove/asprom:1.10.1974d2e5eb150
stdlib@go1.14.11
1.25.13

Open the chart page →

1,870
cmsmsoleds-helm-chartsVerified publisher0.1.61 of 1See more

cmsms oleds-helm-charts 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:11.4.7-debian-12-r290dc6acb7b2e
stdlib@go1.23.10
1.25.13

Open the chart page →

2,904
hive-metastoreolehrgfVerified publisher0.1.01 of 1See more

hive-metastore olehrgf 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
golang.org/x/net@v0.0.0-20191112182307-2180aed22343
stdlib@go1.13.4
0.55.0
1.25.13

Open the chart page →

8,545
paperless-ngxoli-the-devVerified publisher1.1.11 of 1See more

paperless-ngx oli-the-dev 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
stdlib@go1.24.4
1.25.13

Open the chart page →

4,703
exposecontrollerolli-aiVerified publisher1.0.51 of 1See more

exposecontroller olli-ai 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
olliai/exposecontroller:1.0.5a470d96525e4
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
stdlib@go1.16.3
0.55.0
1.25.13

Open the chart page →

2,863
k8s-replicatorolli-aiVerified publisher1.3.01 of 1See more

k8s-replicator olli-ai 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
olliai/k8s-replicator:1.3.05716f2a8bd4c
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
stdlib@go1.17.2
0.55.0
1.25.13

Open the chart page →

2,827
apicurioone-acre-fundVerified publisher2.3.02 of 5See more

apicurio one-acre-fund 2.3.0

2 of the 5 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:14.4.0-debian-11-r237e7ebb082031
stdlib@go1.16.7
1.25.13
jwilder/dockerize:latestf94fb59fb4f6
golang.org/x/net@v0.47.0
stdlib@go1.25.5
0.55.0
1.25.13

Open the chart page →

18,702
nocodbone-acre-fundVerified publisher0.4.62 of 3See more

nocodb one-acre-fund 0.4.6

2 of the 3 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
library/postgres:alpine77f585114c32
stdlib@go1.24.6
1.25.13
nocodb/nocodb:0.258.06779a4ddedf2
golang.org/x/net@v0.19.0
stdlib@go1.21.10
0.55.0
1.25.13

Open the chart page →

3,920
onedevonedev11.9.01 of 1See more

onedev onedev 11.9.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
1dev/server:11.9.0cd5b12fe5471
golang.org/x/net@v0.38.0
stdlib@go1.23.8
0.55.0
1.25.13

Open the chart page →

6,224
one-green-coreone-green-coreVerified publisher0.0.73 of 8See more

one-green-core one-green-core 0.0.7

3 of the 8 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
grafana/grafana:8.5.3ecc1b80b8ca2
golang.org/x/net@v0.0.0-20211118161319-6a13c67c3ce4
stdlib@go1.17.9
0.55.0
1.25.13
library/influxdb:2.0.8ba10ac9ba17a
golang.org/x/net@v0.0.0-20210119194325-5f4716e94777
stdlib@go1.16.5
0.55.0
1.25.13
library/telegraf:1.20.428e98eece020
golang.org/x/net@v0.0.0-20211005215030-d2e5035098b3
stdlib@go1.17.3
0.55.0
1.25.13

Open the chart page →

9,588
ontoserverontoserverVerified publisher0.5.21 of 2See more

ontoserver ontoserver 0.5.2

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
library/postgres:16a3b7f434b2dc
stdlib@go1.24.6
1.25.13

Open the chart page →

1,268
onyx-stackonyx0.3.14 of 12See more

onyx-stack onyx 0.3.1

4 of the 12 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
vespaengine/vespa:8.526.1569b160f58211
golang.org/x/net@v0.39.0
stdlib@go1.24.2
0.55.0
1.25.13
ghcr.io/kedacore/keda:2.17.272dc058e478d
golang.org/x/net@v0.38.0
stdlib@go1.23.8
0.55.0
1.25.13
ghcr.io/kedacore/keda-admission-webhooks:2.17.2c8227c6edb4d
golang.org/x/net@v0.38.0
stdlib@go1.23.8
0.55.0
1.25.13
ghcr.io/kedacore/keda-metrics-apiserver:2.17.2f312f50ddc57
golang.org/x/net@v0.38.0
stdlib@go1.23.8
0.55.0
1.25.13

Open the chart page →

6,604
oom-traceroom-tracerVerified publisher0.1.01 of 1See more

oom-tracer oom-tracer 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/eminaktas/oom-tracer:v0.1.0c90ca8389c87
golang.org/x/net@v0.38.0
stdlib@go1.25.1
0.55.0
1.25.13

Open the chart page →

1,126
opa-nginxopa-nginx0.0.32 of 2See more

opa-nginx opa-nginx 0.0.3

2 of the 2 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
openpolicyagent/opa:0.53.16a58dea59933
golang.org/x/net@v0.10.0
stdlib@go1.20.4
0.55.0
1.25.13
richardjennings/opa-nginx:0.0.366424aca125d
stdlib@go1.20.5
1.25.13

Open the chart page →

2,208
erigonop-chartsVerified publisher0.0.51 of 2See more

erigon op-charts 0.0.5

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
testinprod/op-erigon:latest0a125bd77a2d
golang.org/x/net@v0.33.0
stdlib@go1.22.12
0.55.0
1.25.13

Open the chart page →

2,922
gethop-chartsVerified publisher0.0.31 of 2See more

geth op-charts 0.0.3

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ethereum/client-go:v1.10.2603604c12f612
golang.org/x/net@v0.0.0-20220607020251-c690dde0001d
stdlib@go1.18.8
0.55.0
1.25.13

Open the chart page →

2,197
opds-shelfopds-shelfVerified publisher0.4.02 of 3See more

opds-shelf opds-shelf 0.4.0

2 of the 3 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/calibre-web:latest0767226fcf20
stdlib@go1.17.8
1.25.13
ghcr.io/madeddie/opds-aggregator:latest60c56021c552
stdlib@go1.24.13
1.25.13

Open the chart page →

4,532
open-cacheopen-cacheVerified publisher0.1.01 of 1See more

open-cache open-cache 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/atolat/open-cache:latestd6105dd73eb4
stdlib@go1.25.8
1.25.13

Open the chart page →

448
raspberrymaticopenccuVerified publisher3.83.61 of 1See more

raspberrymatic openccu 3.83.6

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/jens-maus/raspberrymatic:3.83.6.202508244b22b4f407c4
golang.org/x/net@v0.40.0
stdlib@go1.24.4
0.55.0
1.25.13

Open the chart page →

2,444
basic-appopen-charts1.0.01 of 1See more

basic-app open-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ovhplatform/what-is-my-pod:1.0.16d4d455e9aba
stdlib@go1.16.14
1.25.13

Open the chart page →

1,598
jobopen-charts2.0.01 of 1See more

job open-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
library/ubuntu:latest2260313b31c8
stdlib@go1.26.5
1.25.13

Open the chart page →

791
anchore-engineopencloudcx1.13.01 of 2See more

anchore-engine opencloudcx 1.13.0

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
anchore/anchore-engine:v0.10.0bde9eedf639d
golang.org/x/net@v0.0.0-20200602114024-627f9648deb9
stdlib@go1.16.3
0.55.0
1.25.13

Open the chart page →

18,032
bbsimopencord4.8.111 of 1See more

bbsim opencord 4.8.11

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
voltha/bbsim:1.16.7d90403d58016
golang.org/x/net@v0.0.0-20210405180319-a5a99cb37ef4
stdlib@go1.13.8
0.55.0
1.25.13

Open the chart page →

3,949
bbsim-sadis-serveropencord0.3.51 of 1See more

bbsim-sadis-server opencord 0.3.5

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
voltha/bbsim-sadis-server:0.4.0762b272d439e
golang.org/x/net@v0.0.0-20210614182718-04defd469f4e
stdlib@go1.16.3
0.55.0
1.25.13

Open the chart page →

3,763
nem-monitoringopencord1.3.221 of 9See more

nem-monitoring opencord 1.3.22

1 of the 9 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
prom/prometheus:v2.13.10a8caa2e9f19
golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80
stdlib@go1.13.1
0.55.0
1.25.13

Open the chart page →

4,622
volthaopencord2.14.02 of 2See more

voltha opencord 2.14.0

2 of the 2 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
voltha/voltha-ofagent-go:2.1.68feb9ef89e97
golang.org/x/net@v0.0.0-20210614182718-04defd469f4e
stdlib@go1.16.3
0.55.0
1.25.13
voltha/voltha-rw-core:3.4.87a325316fe59
golang.org/x/net@v0.0.0-20210614182718-04defd469f4e
stdlib@go1.16.3
0.55.0
1.25.13

Open the chart page →

3,827
voltha-adapter-openoltopencord2.14.01 of 1See more

voltha-adapter-openolt opencord 2.14.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
voltha/voltha-openolt-adapter:4.5.16d6d79c08350a
golang.org/x/net@v0.26.0
stdlib@go1.23.1
0.55.0
1.25.13

Open the chart page →

899
voltha-adapter-openonuopencord2.14.01 of 1See more

voltha-adapter-openonu opencord 2.14.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
voltha/voltha-openonu-adapter-go:2.12.25d8f2eb5f2a7e
golang.org/x/net@v0.33.0
stdlib@go1.23.1
0.55.0
1.25.13

Open the chart page →

844
voltha-infraopencord2.14.02 of 10See more

voltha-infra opencord 2.14.0

2 of the 10 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
opencord/onos-classic-helm-utils:0.1.00d693ba85fd6
golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7
stdlib@go1.16.5
0.55.0
1.25.13
voltha/bbsim-sadis-server:0.3.5259fc3a03f4e
golang.org/x/net@v0.0.0-20210614182718-04defd469f4e
stdlib@go1.16.3
0.55.0
1.25.13

Open the chart page →

41,306
voltha-stackopencord2.14.04 of 4See more

voltha-stack opencord 2.14.0

4 of the 4 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
voltha/voltha-ofagent-go:2.1.68feb9ef89e97
golang.org/x/net@v0.0.0-20210614182718-04defd469f4e
stdlib@go1.16.3
0.55.0
1.25.13
voltha/voltha-openolt-adapter:4.5.16d6d79c08350a
golang.org/x/net@v0.26.0
stdlib@go1.23.1
0.55.0
1.25.13
voltha/voltha-openonu-adapter-go:2.12.25d8f2eb5f2a7e
golang.org/x/net@v0.33.0
stdlib@go1.23.1
0.55.0
1.25.13
voltha/voltha-rw-core:3.4.87a325316fe59
golang.org/x/net@v0.0.0-20210614182718-04defd469f4e
stdlib@go1.16.3
0.55.0
1.25.13

Open the chart page →

5,570
everest-db-namespaceopeneverestVerified publisher1.16.21 of 1See more

everest-db-namespace openeverest 1.16.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
percona/everest-helmtools:0.0.1904458d04a18
golang.org/x/net@v0.38.0
stdlib@go1.24.6
0.55.0
1.25.13

Open the chart page →

769
cron-connectoropenfaas0.6.161 of 1See more

cron-connector openfaas 0.6.16

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/openfaas/cron-connector:0.7.0982498e8a41e
stdlib@go1.23.5
1.25.13

Open the chart page →

887
federated-gatewayopenfaas0.1.01 of 1See more

federated-gateway openfaas 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/openfaasltd/federated-gateway:0.2.39066d7b3e6a1
stdlib@go1.21.5
1.25.13

Open the chart page →

1,241
gcp-pubsub-connectoropenfaas0.0.11 of 1See more

gcp-pubsub-connector openfaas 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/openfaasltd/gcp-pubsub-connector:0.0.18df071f5b719
golang.org/x/net@v0.35.0
stdlib@go1.23.8
0.55.0
1.25.13

Open the chart page →

1,163
headroom-controlleropenfaas0.1.71 of 1See more

headroom-controller openfaas 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/openfaasltd/headroom-controller:v0.0.467d587cc2c39
golang.org/x/net@v0.38.0
stdlib@go1.26.4
0.55.0
1.25.13

Open the chart page →

254
kafka-connectoropenfaas0.7.151 of 1See more

kafka-connector openfaas 0.7.15

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/openfaasltd/kafka-connector:0.7.160e58eac0e2f7
golang.org/x/net@v0.48.0
stdlib@go1.25.6
0.55.0
1.25.13

Open the chart page →

1,165
mqtt-connectoropenfaas0.4.71 of 1See more

mqtt-connector openfaas 0.4.7

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/openfaas/mqtt-connector:0.4.33311a30b8fe6
golang.org/x/net@v0.0.0-20200425230154-ff2c4b7c35a0
stdlib@go1.18.5
0.55.0
1.25.13

Open the chart page →

1,390
nats-connectoropenfaas0.3.21 of 1See more

nats-connector openfaas 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/openfaas/nats-connector:0.3.0315e57c0a8d8
stdlib@go1.18.5
1.25.13

Open the chart page →

1,472
postgres-connectoropenfaas0.1.21 of 1See more

postgres-connector openfaas 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/openfaasltd/postgres-connector:0.2.3379e583a0a75
stdlib@go1.23.5
1.25.13

Open the chart page →

1,217
pro-builderopenfaas0.6.132 of 2See more

pro-builder openfaas 0.6.13

2 of the 2 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
moby/buildkit:v0.32.2-rootless504731e577c2
golang.org/x/net@v0.43.0
stdlib@go1.25.7
0.55.0
1.25.13
ghcr.io/openfaasltd/pro-builder:0.6.06c17297f9098
golang.org/x/net@v0.53.0
stdlib@go1.24.4
0.55.0
1.25.13

Open the chart page →

2,756
probuilderopenfaas0.2.01 of 2See more

probuilder openfaas 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
moby/buildkit:v0.10.0c2aeafaed434
golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f
stdlib@go1.17.8
0.55.0
1.25.13

Open the chart page →

4,763
rabbitmq-connectoropenfaas0.0.41 of 1See more

rabbitmq-connector openfaas 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/openfaasltd/rabbitmq-connector:0.1.2349f7dca95ec
stdlib@go1.23.5
1.25.13

Open the chart page →

1,037
sns-connectoropenfaas0.1.31 of 1See more

sns-connector openfaas 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/openfaasltd/sns-connector:0.2.0e9ab76a4ec77
stdlib@go1.21.7
1.25.13

Open the chart page →

850
sqs-connectoropenfaas0.2.71 of 1See more

sqs-connector openfaas 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
ghcr.io/openfaasltd/sqs-connector:0.3.4d44ed3b3128c
stdlib@go1.23.5
1.25.13

Open the chart page →

913
agents-sandbox-controlleropenkruise0.3.01 of 1See more

agents-sandbox-controller openkruise 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container imageDigestPackageFixed in
openkruise/agent-sandbox-controller:v0.3.0e0a3bf7c0dc5
golang.org/x/net@v0.47.0
stdlib@go1.25.10
0.55.0
1.25.13

Open the chart page →

274

Container images carrying it

5,367 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/privacyengineering/hawk-service:latestbfedf47bb5e0
golang.org/x/net@v0.19.0
stdlib@go1.20.11
0.55.0
1.25.13
1
ghcr.io/processone/ejabberd:latest5aeb0faa39cf
stdlib@go1.25.12
1.25.13
1
ghcr.io/projectcapsule/capsule-addon-fluxcd:0.2.2e0baf564b706
golang.org/x/net@v0.32.0
stdlib@go1.23.4
0.55.0
1.25.13
1
ghcr.io/projectcontour/contour:v1.30.0b12824d7eb58
golang.org/x/net@v0.26.0
stdlib@go1.22.5
0.55.0
1.25.13
1
ghcr.io/projectcontour/contour:v1.33.0cd6e13fa882d
golang.org/x/net@v0.43.0
stdlib@go1.25.1
0.55.0
1.25.13
1
ghcr.io/projection-operator/projection:0.3.2d06374430a17
golang.org/x/net@v0.53.0
stdlib@go1.26.3
0.55.0
1.25.13
1
ghcr.io/prophetse7en/clonarr:latest9400d298b37a
stdlib@go1.26.4
1.25.13
1
ghcr.io/prymitive/karma:v0.13190a10c5c6793
stdlib@go1.26.3
1.25.13
1
ghcr.io/prymitive/karma:v0.85d06892218680
golang.org/x/net@v0.0.0-20210503060351-7fd8e65b6420
stdlib@go1.16.3
0.55.0
1.25.13
1
ghcr.io/pschichtel/cert-manager-webhook-cloudns:1.1.01020638bbe23
golang.org/x/net@v0.20.0
stdlib@go1.21.6
0.55.0
1.25.13
1
ghcr.io/pschichtel/s3-backup:0.7.017666811f6a7
stdlib@go1.26.4
1.25.13
1
ghcr.io/ptrvsrg/csi-driver-ipfs:latest97d2d9ccd7a5
golang.org/x/net@v0.54.0
stdlib@go1.26.4
0.55.0
1.25.13
1
ghcr.io/puckpuck/seashell:1.2ef5e31333821
golang.org/x/net@v0.0.0-20201021035429-f5854403a974
stdlib@go1.20.10
0.55.0
1.25.13
1
ghcr.io/pulumi-labs/pulumi-exporter:0.1.45415d5a46e7d
stdlib@go1.26.4
1.25.13
1
ghcr.io/pulumi/pulumi-esc-csi-provider:0.1.13fb058e93502
golang.org/x/net@v0.32.0
stdlib@go1.23.1
0.55.0
1.25.13
1
ghcr.io/punchplatform/operator:8.1-dev2a9536c8cee2
golang.org/x/net@v0.20.0
stdlib@go1.22.0
0.55.0
1.25.13
1
ghcr.io/pyrra-dev/pyrra:v0.8.10e02ef538ef0
golang.org/x/net@v0.31.0
stdlib@go1.23.3
0.55.0
1.25.13
1
ghcr.io/qjoly/pr-gitops-grafana-annotation:latest6a75c6b497ed
stdlib@go1.26.5
1.25.13
1
ghcr.io/qjoly/spindle:v1.16.1-alphaaab0c99d313f
stdlib@go1.25.12
1.25.13
1
ghcr.io/rabbitmq/cluster-operator:2.17.25d690e6cd856
golang.org/x/net@v0.47.0
stdlib@go1.25.4
0.55.0
1.25.13
1
ghcr.io/rabbitmq/cluster-operator:2.20.1a96853470256
golang.org/x/net@v0.53.0
stdlib@go1.25.9
0.55.0
1.25.13
1
ghcr.io/radar-base/managementportal/management-portal:3.0.0c1b37e821f72
golang.org/x/net@v0.40.0
stdlib@go1.26.2
0.55.0
1.25.13
1
ghcr.io/raffis/mongodb-query-exporter:v5.1.0ca6ac8a5b329
stdlib@go1.20.5
1.25.13
1
ghcr.io/rajnandan1/kener:3.2.182b993cb232eb
stdlib@go1.20.7
1.25.13
1
ghcr.io/razvanmacovei/x402-k8s-operator:0.1.0bf3407fad182
golang.org/x/net@v0.47.0
stdlib@go1.25.7
0.55.0
1.25.13
1
ghcr.io/recyclarr/recyclarr:8.7.26e69e009e1cd
stdlib@go1.26.3
1.25.13
1
ghcr.io/reiche-world/traefik-secrets-exporter:0.0.21485ff93cbf9
golang.org/x/net@v0.47.0
stdlib@go1.25.5
0.55.0
1.25.13
1
ghcr.io/ricardozd/agentgateway-route-reconciler:0.3.1846f6e407c96
golang.org/x/net@v0.49.0
stdlib@go1.24.13
0.55.0
1.25.13
1
ghcr.io/riesinger/plausible-exporter:1.1.061112cda1be5
stdlib@go1.19.7
1.25.13
1
ghcr.io/riotkit-org/backup-maker-controller:v0.1.262370545ba3d
golang.org/x/net@v0.2.0
stdlib@go1.19.4
0.55.0
1.25.13
1
ghcr.io/riotkit-org/backup-repository:v4.0.0ab41ffa78f69
golang.org/x/net@v0.0.0-20220401154927-543a649e0bdd
stdlib@go1.17.13
0.55.0
1.25.13
1
ghcr.io/riotkit-org/waf-proxy:snapshot683656fdace2
golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4
stdlib@go1.18.3
0.55.0
1.25.13
1
ghcr.io/riotkit-org/wordpress-hardened:v2.0edc6b69873be
stdlib@go1.17.9
1.25.13
1
ghcr.io/riverqueue/riverui:0.5.32dc54179b25a
golang.org/x/net@v0.23.0
stdlib@go1.23.0
0.55.0
1.25.13
1
ghcr.io/runnerm/simply-dns-webhook:v1.10.0fdfffa3984a5
golang.org/x/net@v0.52.0
stdlib@go1.26.4
0.55.0
1.25.13
1
ghcr.io/runwhen-contrib/runwhen-local:0.12.0533ce58c6e02
golang.org/x/net@v0.47.0
stdlib@go1.26.4
0.55.0
1.25.13
1
ghcr.io/rvbsalgado/fencemaster:1.0.0-rc.207056a6aae439
golang.org/x/net@v0.43.0
stdlib@go1.25.8
0.55.0
1.25.13
1
ghcr.io/rybbit-io/rybbit-backend:lateste0d1b397e33c
stdlib@go1.20.7
1.25.13
1
ghcr.io/sagernet/sing-box:v1.12.03c1ee82d450d
golang.org/x/net@v0.42.0
stdlib@go1.24.5
0.55.0
1.25.13
1
ghcr.io/salaboy/fmtok8s-email-service:v0.2.0-nativeb52d5dbac2ca
stdlib@go1.17.11
1.25.13
1
ghcr.io/salaboy/fmtok8s-email-service:v0.1.0-nativecf28472bc460
stdlib@go1.17.11
1.25.13
1
ghcr.io/salemgolemugoo/argocd-bitbucket-proxy:latesta72df069095b
stdlib@go1.26.1
1.25.13
1
ghcr.io/salesforce/kubelet-summary-exporter:sha-c2bf90d377e09d2dd72
golang.org/x/net@v0.8.0
stdlib@go1.18.10
0.55.0
1.25.13
1
ghcr.io/salesforce/sloop:sha-2ce8bbe119e24f24b1d
golang.org/x/net@v0.0.0-20200625001655-4c5254603344
stdlib@go1.16.15
0.55.0
1.25.13
1
ghcr.io/samr037/node-debug-dashboard:0.3.0c79b2e64a211
golang.org/x/net@v0.30.0
stdlib@go1.23.3
0.55.0
1.25.13
1
ghcr.io/sapcc/ntp_exporter:v2.9.079c40c65f5d4
golang.org/x/net@v0.43.0
stdlib@go1.24.6
0.55.0
1.25.13
1
ghcr.io/schaka/janitorr:native-stable7cfe1e0c41da
stdlib@go1.24.6
1.25.13
1
ghcr.io/schmitzis/cert-manager-webhook-bunny:latest125e31c8e85a
golang.org/x/net@v0.5.0
stdlib@go1.19.13
0.55.0
1.25.13
1
ghcr.io/seanmorley15/adventurelog-frontend:v0.13.051ee22428b41
stdlib@go1.23.12
1.25.13
1
ghcr.io/sergelogvinov/hybrid-csi-provisioner:v0.3.1221e07794a8a
golang.org/x/net@v0.48.0
stdlib@go1.25.5
0.55.0
1.25.13
1

syft 1.42.1 · advisories as of 22 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.