CVE-2026-39821

High

Advisory

Published 22 May 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 8.2; base score, highest
EPSS: 0.007; 51st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 4,607; of 17,828 indexed, latest versions
Container images: 5,326; deployed by those charts
Fix available: 3 of 3; affected packages

Red Hat Security Advisory: git-lfs security update

Carried by container images the latest versions of 4,607 of 17,828 indexed charts deploy, on 5,326 images.

Affected package	Affected versions	Fixed in	Images
git-lfsrpm	2.13.3-3.el8_6	0:3.4.1-11.el8_10	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+193 more	1.25.13	5,287
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+220 more	0.55.0	3,735

OSV records: RHSA-2026:30853 GO-2026-5026

Charts affected

4,607 by stars

Chart

Latest

Affected images

Radar Score

temporaldtrdnk-helm-charts

0.35.0

8 of 13 See more

temporal dtrdnk-helm-charts 0.35.0

8 of the 13 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
grafana/grafana :6.7.1	1ff3999e0fc0	golang.org/x/net@v0.0.0-20190923162816-aa69164e4478 stdlib@go1.13.4	0.55.0 1.25.13
jimmidyson/configmap-reload :v0.5.0	904d08e9f701	stdlib@go1.15.7	1.25.13
prom/pushgateway :v1.4.2	a684e7c830a4	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.16.9	0.55.0 1.25.13
temporalio/admin-tools :1.22.4	258958fe2ff2	golang.org/x/net@v0.8.0 stdlib@go1.20.10	0.55.0 1.25.13
temporalio/server :1.22.4	c0a44c26397b	golang.org/x/net@v0.7.0 stdlib@go1.20.11	0.55.0 1.25.13
temporalio/ui :2.16.2	af9c9349708f	golang.org/x/net@v0.10.0 stdlib@go1.20.5	0.55.0 1.25.13
quay.io/prometheus/alertmanager :v0.23.0	9ab73a421b65	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985 stdlib@go1.16.7	0.55.0 1.25.13
quay.io/prometheus/prometheus :v2.31.1	a8779cfe553e	golang.org/x/net@v0.0.0-20211020060615-d418f374d309 stdlib@go1.17.3	0.55.0 1.25.13

Open the chart page →

20,262

cloudflaredduck-helm

1.1.3

1 of 1 See more

cloudflared duck-helm 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
cloudflare/cloudflared :2026.3.0	6b599ca3e974	golang.org/x/net@v0.40.0 stdlib@go1.24.13	0.55.0 1.25.13

Open the chart page →

1,399

postgres-backup-localduck-helm

0.1.5

1 of 1 See more

postgres-backup-local duck-helm 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
prodrigestivill/postgres-backup-local :latest	f70742ebe42b	stdlib@go1.22.6	1.25.13

Open the chart page →

3,524

dumpstoredumpstore

0.1.1

1 of 2 See more

dumpstore dumpstore 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/manzil-infinity180/frontend-dumpstore :226f28ca3efa6d3691044813cd09085e28d4a7b4	4e6394b715d9	stdlib@go1.20.12	1.25.13

Open the chart page →

4,267

duplicacyduplicacy

0.1.2

1 of 2 See more

duplicacy duplicacy 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
drumsergio/duplicacy-container :0.1.0	dd3ee9703969	golang.org/x/net@v0.10.0 stdlib@go1.21.13	0.55.0 1.25.13

Open the chart page →

2,424

applause-btnduyet

0.1.3

1 of 1 See more

applause-btn duyet 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
duyetdev/applause-btn :latest	25e59d223eaa	golang.org/x/net@v0.0.0-20200822124328-c89045814202 stdlib@go1.14.9	0.55.0 1.25.13

Open the chart page →

2,638

commentoduyet

0.2.0

1 of 2 See more

commento duyet 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
registry.gitlab.com/commento/commento :v1.8.0	e0ab1fc86761	golang.org/x/net@v0.0.0-20180811021610-c39426892332 stdlib@go1.14.2	0.55.0 1.25.13

Open the chart page →

2,680

kubernetes-database-scalerdvdlevanon

0.1.2

1 of 1 See more

kubernetes-database-scaler dvdlevanon 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
dvdlevanon/kubernetes-database-scaler :v0.0.36	1e79c1643fe4	golang.org/x/net@v0.8.0	0.55.0

Open the chart page →

1,024

ai-scale-authdysnix

0.1.1

2 of 3 See more

ai-scale-auth dysnix 0.1.1

2 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
alex6021710/ai-scale-auth :latest	6c7a47e470c3	golang.org/x/net@v0.0.0-20211104170005-ce137452f963 stdlib@go1.16.12	0.55.0 1.25.13
alex6021710/ai-scale-migrator :latest	744b8a924f35	golang.org/x/net@v0.0.0-20211013171255-e13a2654a71e stdlib@go1.17.2	0.55.0 1.25.13

Open the chart page →

6,157

ai-scale-doerdysnix

0.1.0

1 of 1 See more

ai-scale-doer dysnix 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
alex6021710/ai-scale-doer :latest	31e533cf7cd3	golang.org/x/net@v0.0.0-20211104170005-ce137452f963 stdlib@go1.16.10	0.55.0 1.25.13

Open the chart page →

2,809

ai-scale-providerdysnix

0.1.0

1 of 1 See more

ai-scale-provider dysnix 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
alex6021710/ai-scale-provider :latest	5837d9b30cc7	golang.org/x/net@v0.0.0-20211104170005-ce137452f963 stdlib@go1.15.8	0.55.0 1.25.13

Open the chart page →

2,187

ai-scale-saverdysnix

0.1.0

1 of 1 See more

ai-scale-saver dysnix 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
alex6021710/ai-scale-saver :latest	f73e8d60fd03	golang.org/x/net@v0.0.0-20211105192438-b53810dc28af stdlib@go1.17	0.55.0 1.25.13

Open the chart page →

2,143

arbitrumdysnix

0.1.1

1 of 1 See more

arbitrum dysnix 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
offchainlabs/nitro-node :v3.1.0-7d1d84c	e95865866129	golang.org/x/net@v0.21.0 stdlib@go1.21.10	0.55.0 1.25.13

Open the chart page →

9,296

bitcoinddysnix

0.4.3

1 of 2 See more

bitcoind dysnix 0.4.3

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/dysnix/docker-bitcoind :0.29.0	490ca8e3dd21	stdlib@go1.22.2	1.25.13

Open the chart page →

2,001

bordysnix

0.0.8

1 of 1 See more

bor dysnix 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
0xpolygon/bor :1.3.7	396d3de26d8b	golang.org/x/net@v0.26.0 stdlib@go1.22.1	0.55.0 1.25.13

Open the chart page →

1,381

gcp-local-ssd-raiddysnix

0.1.7

1 of 2 See more

gcp-local-ssd-raid dysnix 0.1.7

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/local-volume-provisioner :v2.8.0	3e2bf2eaef9f	golang.org/x/net@v0.37.0 stdlib@go1.23.4	0.55.0 1.25.13

Open the chart page →

2,213

gke-upgrade-notification-handlerdysnix

0.1.1

1 of 1 See more

gke-upgrade-notification-handler dysnix 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
dysnix/gke-upgrade-notification-handler :latest	c166f958f86a	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.17.7	0.55.0 1.25.13

Open the chart page →

2,098

grafana-dashboardsdysnix

0.2.2

1 of 2 See more

grafana-dashboards dysnix 0.2.2

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
grafana/grafana :7.4.5	d322192ed2fa	golang.org/x/net@v0.0.0-20201022231255-08b38378de70 stdlib@go1.15.6	0.55.0 1.25.13

Open the chart page →

5,170

heimdalldysnix

0.0.1

1 of 1 See more

heimdall dysnix 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
0xpolygon/heimdall :1.0.1	34ddf259993c	golang.org/x/net@v0.8.0 stdlib@go1.20.5	0.55.0 1.25.13

Open the chart page →

1,374

local-path-provisionerdysnix

0.0.20

1 of 1 See more

local-path-provisioner dysnix 0.0.20

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
rancher/local-path-provisioner :v0.0.20	d5999b20a1b1	golang.org/x/net@v0.0.0-20201021035429-f5854403a974 stdlib@go1.16.6	0.55.0 1.25.13

Open the chart page →

2,926

pritunldysnix

0.2.7

1 of 3 See more

pritunl dysnix 0.2.7

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/dysnix/bitnami/mongodb :4.4.11-debian-10-r5	073116e61007	stdlib@go1.16.12	1.25.13

Open the chart page →

5,059

servicemonitor-appsdysnix

0.1.0

1 of 1 See more

servicemonitor-apps dysnix 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ethpandaops/ethereum-metrics-exporter :0.21.0	d1780db2e286	golang.org/x/net@v0.0.0-20220607020251-c690dde0001d stdlib@go1.18.10	0.55.0 1.25.13

Open the chart page →

1,579

smokeping-proberdysnix

0.3.1

1 of 1 See more

smokeping-prober dysnix 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
superque/smokeping-prober :v0.11.0	28ca636d1dee	golang.org/x/net@v0.51.0 stdlib@go1.26.1	0.55.0 1.25.13

Open the chart page →

471

eav-componenteav-component

1.0.0

1 of 3 See more

eav-component eav-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/eav-component-php :latest	24bbca4a52a8	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.55.0 1.25.13

Open the chart page →

7,268

echoappechoapp

0.1.0

1 of 1 See more

echoapp echoapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
hashicorp/http-echo :1.0.0	fcb75f691c8b	stdlib@go1.21.1	1.25.13

Open the chart page →

550

aeros-orchestrator-overlayeclipse-aerios

2.0.0

1 of 2 See more

aeros-orchestrator-overlay eclipse-aerios 2.0.0

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
masipcat/wireguard-go :latest	696206e5954d	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.20.14	0.55.0 1.25.13

Open the chart page →

1,195

api-gatewayeclipse-aerios

1.7.0

1 of 1 See more

api-gateway eclipse-aerios 1.7.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
devopsfaith/krakend :2.6.3	4c678c224f67	golang.org/x/net@v0.24.0 stdlib@go1.22.3	0.55.0 1.25.13

Open the chart page →

1,428

federatoreclipse-aerios

1.1.0

1 of 1 See more

federator eclipse-aerios 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
eclipseaerios/federator :1.1.0	18c7f0d101c0	golang.org/x/net@v0.25.0 stdlib@go1.22.12	0.55.0 1.25.13

Open the chart page →

743

idmeclipse-aerios

2.0.0

1 of 2 See more

idm eclipse-aerios 2.0.0

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/postgres :16.4	e62fbf9d3e2b	stdlib@go1.18.2	1.25.13

Open the chart page →

4,610

iotaeclipse-aerios

1.0.2

3 of 4 See more

iota eclipse-aerios 1.0.2

3 of the 4 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
eclipseaerios/iota-tangle-peerer :latest	99d7ff18d416	golang.org/x/net@v0.30.0 stdlib@go1.22.12	0.55.0 1.25.13
iotaledger/hornet :2.0	01206f1ba89c	golang.org/x/net@v0.14.0 stdlib@go1.21.10	0.55.0 1.25.13
iotaledger/inx-dashboard :1.0	12c669cb8748	golang.org/x/net@v0.14.0 stdlib@go1.21.1	0.55.0 1.25.13

Open the chart page →

13,647

llo-apieclipse-aerios

1.0.0

1 of 1 See more

llo-api eclipse-aerios 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
eclipseaerios/llo-api :1.2.0	ab7a04182191	golang.org/x/net@v0.17.0 stdlib@go1.21.13	0.55.0 1.25.13

Open the chart page →

931

llo-docker-operatoreclipse-aerios

1.0.0

2 of 2 See more

llo-docker-operator eclipse-aerios 1.0.0

2 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
eclipseaerios/llo-docker-operator :1.1.2	d7ec28bfe735	golang.org/x/net@v0.25.0 stdlib@go1.23.12	0.55.0 1.25.13
quay.io/brancz/kube-rbac-proxy :v0.14.1	58d91a5faaf8	golang.org/x/net@v0.7.0 stdlib@go1.19.4	0.55.0 1.25.13

Open the chart page →

2,194

llo-k8seclipse-aerios

1.1.0

2 of 2 See more

llo-k8s eclipse-aerios 1.1.0

2 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
eclipseaerios/llo-k8s-operator :1.4.1	2b2c0cf26fd2	golang.org/x/net@v0.10.0 stdlib@go1.21.13	0.55.0 1.25.13
quay.io/brancz/kube-rbac-proxy :v0.14.1	58d91a5faaf8	golang.org/x/net@v0.7.0 stdlib@go1.19.4	0.55.0 1.25.13

Open the chart page →

2,166

llo-natseclipse-aerios

1.0.0

1 of 1 See more

llo-nats eclipse-aerios 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/nats :2.11.4	c8cd23806eef	stdlib@go1.24.3	1.25.13

Open the chart page →

838

mintakaeclipse-aerios

1.0.0

1 of 2 See more

mintaka eclipse-aerios 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
timescale/timescaledb-postgis :latest-pg12	7758704d4a14	stdlib@go1.14	1.25.13

Open the chart page →

11,492

openfaas2eclipse-aerios

12.0.5

6 of 6 See more

openfaas2 eclipse-aerios 12.0.5

6 of the 6 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/nats-streaming :0.25.5	ced93c701875	stdlib@go1.19.10	1.25.13
prom/prometheus :v2.51.2	4f6c47e39a90	golang.org/x/net@v0.22.0 stdlib@go1.22.2	0.55.0 1.25.13
ghcr.io/openfaas/faas-netes :0.18.12	24431adc8e2d	golang.org/x/net@v0.32.0 stdlib@go1.23.4	0.55.0 1.25.13
ghcr.io/openfaas/gateway :0.27.13	82b15393116e	stdlib@go1.24.6	1.25.13
ghcr.io/openfaasltd/jetstream-queue-worker :0.3.37	d96366e208b1	stdlib@go1.22.1	1.25.13
quay.io/prometheus/alertmanager :v0.27.0	e13b6ed5cb92	golang.org/x/net@v0.20.0 stdlib@go1.21.7	0.55.0 1.25.13

Open the chart page →

6,845

openldap-stack-haeclipse-aerios

4.1.2

1 of 4 See more

openldap-stack-ha eclipse-aerios 4.1.2

1 of the 4 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
eclipseaerios/openldap :2.6.3	0208743f315e	stdlib@go1.18.2	1.25.13

Open the chart page →

7,539

orion-ldeclipse-aerios

1.0.0

1 of 2 See more

orion-ld eclipse-aerios 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/mongo :7.0.12	ae1cf99fa7bf	stdlib@go1.21.12	1.25.13

Open the chart page →

9,831

chartecr-toke-renew

0.1.5

1 of 1 See more

chart ecr-toke-renew 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
itzmanish/ecr-token-renew :latest	02154d1c05b5	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.6	0.55.0 1.25.13

Open the chart page →

2,819

edge-accessedge-access

0.1.0

1 of 1 See more

edge-access edge-access 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
quay.io/oauth2-proxy/oauth2-proxy :v7.13.0	56e3daedf765	golang.org/x/net@v0.42.0 stdlib@go1.25.4	0.55.0 1.25.13

Open the chart page →

677

continuum-proxyedgelesssys

1.5.1

1 of 1 See more

continuum-proxy edgelesssys 1.5.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/edgelesssys/continuum/continuum-proxydigest-pinned	24c76f294a80	golang.org/x/net@v0.32.0 stdlib@go1.23.3	0.55.0 1.25.13

Open the chart page →

859

marblerunedgelesssys

1.9.2

1 of 1 See more

marblerun edgelesssys 1.9.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/edgelesssys/marblerun/coordinator :v1.9.2	e589db0d0a2c	stdlib@go1.26.1	1.25.13

Open the chart page →

1,873

marblerun-coordinatoredgelesssys

0.5.0

1 of 1 See more

marblerun-coordinator edgelesssys 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/edgelesssys/coordinator :v0.5.0	bcd5b8d4c45c	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.7	0.55.0 1.25.13

Open the chart page →

11,044

pagesedgwarepages

1.0.0

1 of 3 See more

pages edgwarepages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.13

Open the chart page →

20,287

grafanaedu

5.3.0

1 of 1 See more

grafana edu 5.3.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
grafana/grafana :7.0.3	d72946c8e5d5	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.3	0.55.0 1.25.13

Open the chart page →

3,200

prometheusedu

11.6.0

4 of 6 See more

prometheus edu 11.6.0

4 of the 6 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
prom/alertmanager :v0.20.0	7e4e9f7a0954	golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80 stdlib@go1.13.5	0.55.0 1.25.13
prom/prometheus :v2.19.0	bfad037f95e5	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9 stdlib@go1.14.4	0.55.0 1.25.13
prom/pushgateway :v1.2.0	0a9031142481	stdlib@go1.13.8	1.25.13
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120 stdlib@go1.14.4	0.55.0 1.25.13

Open the chart page →

8,495

education-componenteducation-component

1.0.0

1 of 3 See more

education-component education-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/education-component-php :latest	da6b05a1a601	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.55.0 1.25.13

Open the chart page →

7,340

cert-manager-cpanel-dns-webhookegeback

1.0.6

1 of 1 See more

cert-manager-cpanel-dns-webhook egeback 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
jamesorlakin/cert-manager-cpanel-dns-webhook :v0.3.0	3894dc11b236	golang.org/x/net@v0.29.0 stdlib@go1.22.8	0.55.0 1.25.13

Open the chart page →

1,300

home-assistantegeback

2.0.35

1 of 1 See more

home-assistant egeback 2.0.35

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/home-assistant/home-assistant :2026.8.2	56690a89c79a	golang.org/x/net@v0.49.0 stdlib@go1.23.3	0.55.0 1.25.13

Open the chart page →

2,202

unifiegeback

2.1.6

1 of 1 See more

unifi egeback 2.1.6

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
jacobalberty/unifi :v10.0.162	896c0ab82d33	stdlib@go1.24.6	1.25.13

Open the chart page →

7,481

Container images carrying it

5,326 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/squat/generic-device-plugin :latest	dc192e164c69	golang.org/x/net@v0.51.0 stdlib@go1.26.2	0.55.0 1.25.13	1
ghcr.io/sredevopsorg/ghost-on-kubernetes :main	06adb21bfdfc	stdlib@go1.26.4	1.25.13	1
ghcr.io/stakater/ingressmonitorcontroller :v2.2.13	3301afb61c10	golang.org/x/net@v0.47.0 stdlib@go1.24.13	0.55.0 1.25.13	1
ghcr.io/stakater/reloader :v1.4.19	0530cf462fa3	stdlib@go1.26.4	1.25.13	1
ghcr.io/stakater/reloader :v1.4.4	a571c5b32c0f	golang.org/x/net@v0.39.0 stdlib@go1.24.4	0.55.0 1.25.13	1
ghcr.io/stashed/stash :v0.42.0	3a98245a7667	golang.org/x/net@v0.26.0 stdlib@go1.25.3	0.55.0 1.25.13	1
ghcr.io/stashed/stash-crd-installer :v0.42.0	76f0a650e44b	golang.org/x/net@v0.38.0 stdlib@go1.25.3	0.55.0 1.25.13	1
ghcr.io/stashed/stash-crd-installer :v0.32.0	c6f2a844b5dd	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.55.0 1.25.13	1
ghcr.io/stashed/stash-crd-installer :v0.42.1	d6c9b7a1f7b8	golang.org/x/net@v0.38.0 stdlib@go1.25.5	0.55.0 1.25.13	1
ghcr.io/stashed/stash-enterprise :v0.42.1	759f3850eda9	golang.org/x/net@v0.38.0 stdlib@go1.25.5	0.55.0 1.25.13	1
ghcr.io/stashed/stash-enterprise :v0.32.0	e9bde36e34b7	golang.org/x/net@v0.15.0 stdlib@go1.20.7	0.55.0 1.25.13	1
ghcr.io/steadybit/extension-container :v1.8.1	ae79f958b479	golang.org/x/net@v0.50.0 stdlib@go1.25.12	0.55.0 1.25.13	1
ghcr.io/steadybit/extension-host :v1.8.1	03a5ef26aac5	golang.org/x/net@v0.50.0 stdlib@go1.25.12	0.55.0 1.25.13	1
ghcr.io/stefanprodan/podinfo :6.1.3	f25ebb9c6788	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f stdlib@go1.17.9	0.55.0 1.25.13	1
ghcr.io/stenic/k8status :0.17.0	93298e03089e	golang.org/x/net@v0.26.0 stdlib@go1.23.12	0.55.0 1.25.13	1
ghcr.io/stenic/sql-operator :1.13.2	f4324baa2aad	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.17.13	0.55.0 1.25.13	1
ghcr.io/stenic/well-known :1.11.0	ae85f257a10f	golang.org/x/net@v0.48.0 stdlib@go1.24.13	0.55.0 1.25.13	1
ghcr.io/storax/kubedoom :0.6.0	851ba8c80b93	stdlib@go1.17.6	1.25.13	1
ghcr.io/streamingfast/blockmeta-service :2f971e0	4f0a86e490b6	golang.org/x/net@v0.19.0 stdlib@go1.22.1	0.55.0 1.25.13	1
ghcr.io/streamingfast/firehose-core :v1.10.2	22f84e3615c8	golang.org/x/net@v0.0.0-20220812174116-3211cb980234 stdlib@go1.18.5	0.55.0 1.25.13	1
ghcr.io/streamingfast/firehose-core :v1.12.3	91fca773a63f	golang.org/x/net@v0.41.0 stdlib@go1.24.10	0.55.0 1.25.13	1
ghcr.io/streamingfast/firehose-ethereum :v2.12.4	89969b78fb07	golang.org/x/net@v0.0.0-20220812174116-3211cb980234 stdlib@go1.24.5	0.55.0 1.25.13	1
ghcr.io/streamingfast/firehose-ethereum :v2.14.3	bf816072380e	golang.org/x/net@v0.0.0-20220812174116-3211cb980234 stdlib@go1.18.5	0.55.0 1.25.13	1
ghcr.io/streamingfast/firehose-ethereum :v2.12.4-geth	d7bdfa7b41da	golang.org/x/net@v0.39.0 stdlib@go1.24.2	0.55.0 1.25.13	1
ghcr.io/streamingfast/go-ethereum :geth-v1.16.9-fh3.0	8e3cb38953a3	golang.org/x/net@v0.47.0 stdlib@go1.25.7	0.55.0 1.25.13	1
ghcr.io/streamingfast/substreams-sink-kv :v2.3.0	26953ec68d5d	golang.org/x/net@v0.23.0 stdlib@go1.22.9	0.55.0 1.25.13	1
ghcr.io/streamingfast/substreams-sink-noop :v1.4.0	d7c43c3135c6	golang.org/x/net@v0.23.0 stdlib@go1.22.9	0.55.0 1.25.13	1
ghcr.io/strrl/supabase-operator :2026.7.25	87d083ab8980	golang.org/x/net@v0.46.0 stdlib@go1.25.12	0.55.0 1.25.13	1
ghcr.io/strrl/wonder-mesh-net :v2026.629.0	625b140372fd	golang.org/x/net@v0.46.0 stdlib@go1.25.11	0.55.0 1.25.13	1
ghcr.io/substra/fabric-peer :0.2.4	f681e0343a31	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.18.10	0.55.0 1.25.13	1
ghcr.io/substra/fabric-tools :0.2.4	3491a0f31c4a	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.18.10	0.55.0 1.25.13	1
ghcr.io/substra/orchestrator-server :1.0.0	647e45284a80	golang.org/x/net@v0.28.0 stdlib@go1.21.13	0.55.0 1.25.13	1
ghcr.io/substratusai/lingo :v0.2.1	2c807cd41ed4	golang.org/x/net@v0.22.0 stdlib@go1.22.5	0.55.0 1.25.13	1
ghcr.io/supabase-community/supabase-operator :v0.1.3	253a6dcbf4f0	golang.org/x/net@v0.47.0 stdlib@go1.25.12	0.55.0 1.25.13	1
ghcr.io/synapsecns/sanguine/agents :6e3887fc2a05aff0d159453cedbfbe5024b910bf	81a9ebc899a4	golang.org/x/net@v0.7.0 stdlib@go1.20.3	0.55.0 1.25.13	1
ghcr.io/synapsecns/sanguine/cctp-relayer :b5a1dd5288f1a18eb05994e130d626fed45a56fc	2f1408c94168	golang.org/x/net@v0.8.0 stdlib@go1.20.5	0.55.0 1.25.13	1
ghcr.io/synapsecns/sanguine/explorer :latest	00131e3d1eaf	golang.org/x/net@v0.35.0 stdlib@go1.22.4	0.55.0 1.25.13	1
ghcr.io/synapsecns/sanguine/promexporter :4a9aad096c2bd1160e56e5472ddac77fa0cde2e9	416c1c5aeb86	golang.org/x/net@v0.10.0 stdlib@go1.20.6	0.55.0 1.25.13	1
ghcr.io/synapsecns/sanguine/screener-api :latest	b3de2050460a	golang.org/x/net@v0.35.0 stdlib@go1.22.4	0.55.0 1.25.13	1
ghcr.io/synapsecns/sanguine/scribe :6e3887fc2a05aff0d159453cedbfbe5024b910bf	5e0a3dfa9f96	golang.org/x/net@v0.7.0 stdlib@go1.20.3	0.55.0 1.25.13	1
ghcr.io/synapsecns/sanguine/scribe :latest	81edba952403	golang.org/x/net@v0.35.0 stdlib@go1.22.4	0.55.0 1.25.13	1
ghcr.io/synapsecns/sanguine/sinner :latest	3e98a98f6074	golang.org/x/net@v0.19.0 stdlib@go1.20.14	0.55.0 1.25.13	1
ghcr.io/syself/hetzner-cloud-controller-manager :v2.0.7	7d4a5e29c387	golang.org/x/net@v0.49.0 stdlib@go1.24.5	0.55.0 1.25.13	1
ghcr.io/tailscale/tailscale :v1.34.1	ce1862e6b3a5	golang.org/x/net@v0.1.0 stdlib@go1.19.2-ts3fd24dee31	0.55.0 1.25.13	1
ghcr.io/tale/headplane :0.5.5	0dbc52cffc19	stdlib@go1.23.4	1.25.13	1
ghcr.io/tale/headplane :0.6.3	9476cc5adb12	golang.org/x/net@v0.42.0 stdlib@go1.25.1	0.55.0 1.25.13	1
ghcr.io/tarampampam/error-pages :2.6.0	13e73da04ee4	stdlib@go1.17.6	1.25.13	1
ghcr.io/tarampampam/webhook-tester :2.3.0	85818267b450	golang.org/x/net@v0.38.0 stdlib@go1.26.2	0.55.0 1.25.13	1
ghcr.io/taskmedia/kubectl-gpg-ncftp :main	0fb2b5584f7c	golang.org/x/net@v0.23.0 stdlib@go1.22.10	0.55.0 1.25.13	1
ghcr.io/techarohq/anubis :v1.21.3	940ac71ef6fc	golang.org/x/net@v0.42.0 stdlib@go1.24.5	0.55.0 1.25.13	1