CVE-2026-39821

High

Advisory

Published 22 May 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 8.2; base score, highest
EPSS: 0.007; 51st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 4,671; of 17,828 indexed, latest versions
Container images: 5,406; deployed by those charts
Fix available: 3 of 3; affected packages

Red Hat Security Advisory: git-lfs security update

Carried by container images the latest versions of 4,671 of 17,828 indexed charts deploy, on 5,406 images.

Affected package	Affected versions	Fixed in	Images
git-lfsrpm	2.13.3-3.el8_6	0:3.4.1-11.el8_10	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+193 more	1.25.13	5,364
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+222 more	0.55.0	3,790

OSV records: RHSA-2026:30853 GO-2026-5026

Charts affected

4,671 by stars

Chart

Latest

Affected images

Radar Score

kube-prometheus-stackkube-prometheus-stack-oci

91.4.1

2 of 6 See more

kube-prometheus-stack kube-prometheus-stack-oci 91.4.1

2 of the 6 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
grafana/grafana :13.2.2-distroless	69a5d2d957ca	golang.org/x/net@v0.51.0 stdlib@go1.26.4	0.55.0 1.25.13
quay.io/prometheus/node-exporter :v1.12.1-distroless	8c9bac11973b	stdlib@go1.26.5	1.25.13

Open the chart page →

682

kube-vipkube-vip

0.11.1

1 of 1 See more

kube-vip kube-vip 0.11.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/kube-vip/kube-vip :v1.2.3	2fcdbb014a2e	stdlib@go1.26.5	1.25.13

Open the chart page →

125

outlinekubitodev

1.2.2

1 of 4 See more

outline kubitodev 1.2.2

1 of the 4 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
outlinewiki/outline :0.82.0	494dfb9249a6	stdlib@go1.20.12	1.25.13

Open the chart page →

5,419

linkerd-vizlinkerd2-edge

30.14.11-edge

1 of 5 See more

linkerd-viz linkerd2-edge 30.14.11-edge

1 of the 5 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.48.1	a67e5e402ff5	golang.org/x/net@v0.17.0 stdlib@go1.21.5	0.55.0 1.25.13

Open the chart page →

1,364

plane-cemakeplane

1.8.1

3 of 11 See more

plane-ce makeplane 1.8.1

3 of the 11 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/postgres :15.7-alpine	468d34fefd63	stdlib@go1.18.2	1.25.13
minio/mc :RELEASE.2025-08-13T08-35-41Z	a7fe349ef4bd	golang.org/x/net@v0.42.0 stdlib@go1.24.6	0.55.0 1.25.13
minio/minio :RELEASE.2025-09-07T16-13-09Z	14cea493d9a3	golang.org/x/net@v0.39.0 stdlib@go1.24.6	0.55.0 1.25.13

Open the chart page →

5,004

milvusmilvus-helm

5.0.28

2 of 4 See more

milvus milvus-helm 5.0.28

2 of the 4 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
milvusdb/etcd :3.5.25-r1	fededb2f2d63	golang.org/x/net@v0.38.0 stdlib@go1.24.10	0.55.0 1.25.13
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	golang.org/x/net@v0.29.0 stdlib@go1.23.4	0.55.0 1.25.13

Open the chart page →

11,237

mssqlmssql

1.10.3

1 of 1 See more

mssql mssql 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
registry.gitlab.com/xrow-public/helm-mssql/mssql :1.10.3	f923d842bc47	stdlib@go1.23.1	1.25.13

Open the chart page →

643

opa-kube-mgmtopa-kube-mgmt

11.0.12

2 of 2 See more

opa-kube-mgmt opa-kube-mgmt 11.0.12

2 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
openpolicyagent/kube-mgmt :11.0.12	3a8b1bacbcd8	stdlib@go1.25.0	1.25.13
openpolicyagent/opa :1.19.0	852359995443	stdlib@go1.26.5	1.25.13

Open the chart page →

622

redis-operatorot-container-kit

0.26.1

1 of 1 See more

redis-operator ot-container-kit 0.26.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
quay.io/opstree/redis-operator :v0.26.0	1c6818e5e505	stdlib@go1.25.12	1.25.13

Open the chart page →

137

outlineoutline

0.0.9

1 of 4 See more

outline outline 0.0.9

1 of the 4 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
outlinewiki/outline :0.69.1	d060dcd8f9aa	stdlib@go1.19.4	1.25.13

Open the chart page →

4,459

spirespiffe

0.30.2

4 of 10 See more

spire spiffe 0.30.2

4 of the 10 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/spiffe/spiffe-csi-driver :0.2.7	9dfe4f0caff0	golang.org/x/net@v0.34.0 stdlib@go1.24.0	0.55.0 1.25.13
ghcr.io/spiffe/spiffe-helper :0.11.0	1c92e5998ad3	golang.org/x/net@v0.42.0 stdlib@go1.25.3	0.55.0 1.25.13
ghcr.io/spiffe/spire-controller-manager :0.7.0	d7b9e710f542	stdlib@go1.26.5	1.25.13
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.15.0	11f199f6bec4	golang.org/x/net@v0.40.0 stdlib@go1.24.6	0.55.0 1.25.13

Open the chart page →

1,688

altinity-clickhouse-operatoraltinity-clickhouse-operator

0.27.3

2 of 3 See more

altinity-clickhouse-operator altinity-clickhouse-operator 0.27.3

2 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.27.3	251c4fda2818	stdlib@go1.26.5	1.25.13
altinity/metrics-exporter :0.27.3	6831ce244b81	stdlib@go1.26.5	1.25.13

Open the chart page →

141

bytebasebytebase

1.1.5

1 of 1 See more

bytebase bytebase 1.1.5

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
bytebase/bytebase :latest	a6d845773b60	stdlib@go1.26.5	1.25.13

Open the chart page →

318

cert-manager-csi-drivercert-manager

0.16.0

3 of 3 See more

cert-manager-csi-driver cert-manager 0.16.0

3 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-csi-driver :v0.16.0	9d13db6dc80e	stdlib@go1.26.5	1.25.13
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.17.0	f9de845b1701	golang.org/x/net@v0.54.0 stdlib@go1.26.3	0.55.0 1.25.13
registry.k8s.io/sig-storage/livenessprobe :v2.19.0	06da0d5b8908	golang.org/x/net@v0.54.0 stdlib@go1.26.3	0.55.0 1.25.13

Open the chart page →

507

ansible-semaphorecloudhippie

15.2.11

1 of 1 See more

ansible-semaphore cloudhippie 15.2.11

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
semaphoreui/semaphore :v2.19.14	98ad9bc7a2a0	golang.org/x/net@v0.36.0 stdlib@go1.25.5	0.55.0 1.25.13

Open the chart page →

1,430

etcdcloudpirates-etcd

0.8.8

1 of 1 See more

etcd cloudpirates-etcd 0.8.8

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
gcr.io/etcd-development/etcd :v3.7.1	a9983dd6d928	stdlib@go1.26.5	1.25.13

Open the chart page →

143

zookeepercloudpirates-zookeeper

0.15.0

1 of 1 See more

zookeeper cloudpirates-zookeeper 0.15.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/zookeeper :3.9.5	7d0f24ebb67b	stdlib@go1.18.1	1.25.13

Open the chart page →

3,023

vertical-pod-autoscalercluster-autoscaler

0.12.0

4 of 4 See more

vertical-pod-autoscaler cluster-autoscaler 0.12.0

4 of the 4 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
registry.k8s.io/autoscaling/vpa-admission-controller :1.7.1	be29624f7f12	stdlib@go1.26.5	1.25.13
registry.k8s.io/autoscaling/vpa-recommender :1.7.1	89cea705535f	stdlib@go1.26.5	1.25.13
registry.k8s.io/autoscaling/vpa-updater :1.7.1	feb42a526970	stdlib@go1.26.5	1.25.13
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20231011-8b53cabe0	a7943503b45d	golang.org/x/net@v0.16.0 stdlib@go1.21.3	0.55.0 1.25.13

Open the chart page →

1,062

codefreshcodefresh-onprem

2.12.16

5 of 42 See more

codefresh codefresh-onprem 2.12.16

5 of the 42 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
bitnamilegacy/consul :1.21.4-debian-12-r1	33ae872fc99d	golang.org/x/net@v0.43.0 stdlib@go1.25.0	0.55.0 1.25.13
bitnamilegacy/mongodb :7.0.14-debian-12-r3	21e8f8baa432	golang.org/x/net@v0.27.0 stdlib@go1.21.12	0.55.0 1.25.13
bitnamilegacy/nats :2.11.8-debian-12-r0	fa0cfba6034a	stdlib@go1.24.6	1.25.13
quay.io/codefresh/dind :3.0.25	0885ab519dac	golang.org/x/net@v0.43.0 stdlib@go1.26.5	0.55.0 1.25.13
quay.io/codefresh/redis :7.4.3-debian-12-r0	935f97598255	stdlib@go1.23.8	1.25.13

Open the chart page →

15,553

couchbase-operatorcouchbase

2.93.0

2 of 2 See more

couchbase-operator couchbase 2.93.0

2 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
couchbase/admission-controller :2.9.3	bf2d2e87e45f	golang.org/x/net@v0.43.0 stdlib@go1.26.5	0.55.0 1.25.13
couchbase/operator :2.9.3	69a385b49e1f	golang.org/x/net@v0.43.0 stdlib@go1.26.5	0.55.0 1.25.13

Open the chart page →

754

aws-ebs-csi-driverdeliveryhero

2.17.4

6 of 6 See more

aws-ebs-csi-driver deliveryhero 2.17.4

6 of the 6 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver :v1.16.1	1564359e1e0e	golang.org/x/net@v0.4.0 stdlib@go1.19.6	0.55.0 1.25.13
public.ecr.aws/eks-distro/kubernetes-csi/external-attacher :v4.1.0-eks-1-25-latest	701eea03388c	golang.org/x/net@v0.4.0 stdlib@go1.19.5	0.55.0 1.25.13
public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner :v3.4.0-eks-1-25-latest	460ee1a59fea	golang.org/x/net@v0.4.0 stdlib@go1.19.7	0.55.0 1.25.13
public.ecr.aws/eks-distro/kubernetes-csi/external-resizer :v1.7.0-eks-1-25-latest	e711da25e7a0	golang.org/x/net@v0.4.0 stdlib@go1.19.8	0.55.0 1.25.13
public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe :v2.9.0-eks-1-25-latest	8a305e162caa	golang.org/x/net@v0.7.0 stdlib@go1.19.8	0.55.0 1.25.13
public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar :v2.7.0-eks-1-25-latest	f4345e67df8f	golang.org/x/net@v0.7.0 stdlib@go1.19.8	0.55.0 1.25.13

Open the chart page →

6,527

loki-simple-scalablegrafana

1.8.11

2 of 3 See more

loki-simple-scalable grafana 1.8.11

2 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
grafana/agent-operator :v0.25.1	a136c6208aa3	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18	0.55.0 1.25.13
grafana/loki :2.6.1	1ee60f980950	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.9	0.55.0 1.25.13

Open the chart page →

6,489

memcachedkubelauncher

0.1.32

1 of 1 See more

memcached kubelauncher 0.1.32

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/kubelauncher/memcacheddigest-pinned	b599ca6b3ff3	stdlib@go1.26.5	1.25.13

Open the chart page →

693

mysqlkubelauncher

0.4.4

1 of 1 See more

mysql kubelauncher 0.4.4

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/kubelauncher/mysqldigest-pinned	e9609bd50416	stdlib@go1.26.5	1.25.13

Open the chart page →

1,036

postgresqlkubelauncher

0.4.3

1 of 1 See more

postgresql kubelauncher 0.4.3

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/kubelauncher/postgresqldigest-pinned	1a27e11e5925	stdlib@go1.26.5	1.25.13

Open the chart page →

1,220

kubernetes-replicatorkubernetes-replicator

2.12.4

1 of 1 See more

kubernetes-replicator kubernetes-replicator 2.12.4

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
quay.io/mittwald/kubernetes-replicator :v2.12.4	5dc9fc5ff59a	golang.org/x/net@v0.38.0 stdlib@go1.24.13	0.55.0 1.25.13

Open the chart page →

273

lakefslakefs

1.12.31

1 of 1 See more

lakefs lakefs 1.12.31

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
treeverse/lakefs :1.86.0	fb7a0d90f77e	stdlib@go1.26.5	1.25.13

Open the chart page →

407

diunnicholaswilde

1.0.0

1 of 1 See more

diun nicholaswilde 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/crazy-max/diun :4.19.0	c94e32b888e4	golang.org/x/net@v0.0.0-20210610132358-84b48f89b13b stdlib@go1.16.5	0.55.0 1.25.13

Open the chart page →

3,773

adguard-homerm3l

0.24.1

1 of 2 See more

adguard-home rm3l 0.24.1

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
adguard/adguardhome :v0.107.51	3a143e6c071c	golang.org/x/net@v0.25.0 stdlib@go1.22.4	0.55.0 1.25.13

Open the chart page →

1,149

spegelspegel

0.7.4

1 of 1 See more

spegel spegel 0.7.4

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/spegel-org/spegeldigest-pinned	26c60b05e08a	stdlib@go1.26.5	1.25.13

Open the chart page →

188

supabasetokens-studio

1.0.0

3 of 14 See more

supabase tokens-studio 1.0.0

3 of the 14 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
darthsim/imgproxy :v3.26	476cb08c816a	golang.org/x/net@v0.30.0 stdlib@go1.23.2	0.55.0 1.25.13
library/postgres :15-alpine	a46e076249ce	stdlib@go1.24.6	1.25.13
supabase/gotrue :v2.163.0	ba4ddc594b0b	golang.org/x/net@v0.23.0 stdlib@go1.22.3	0.55.0 1.25.13

Open the chart page →

23,212

prometheus-operatorarldka

13.0.1

2 of 2 See more

prometheus-operator arldka 13.0.1

2 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
quay.io/prometheus-operator/prometheus-operator :v0.73.2	04f2b98d71ef	golang.org/x/net@v0.22.0 stdlib@go1.22.2	0.55.0 1.25.13
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20221220-controller-v1.5.1-58-g787ea74b6	4d99688e5573	golang.org/x/net@v0.1.0 stdlib@go1.19.4	0.55.0 1.25.13

Open the chart page →

2,109

renterdartur9010

1.4.4

2 of 2 See more

renterd artur9010 1.4.4

2 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
artur9010/wait-for :v1.0.0	6b4de3ce8b0e	stdlib@go1.22.4	1.25.13
ghcr.io/siafoundation/renterd :2.9.0	e0334f124863	stdlib@go1.26.0	1.25.13

Open the chart page →

8,637

nsqbeeinventor

1.3.0

1 of 1 See more

nsq beeinventor 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
nsqio/nsq :v1.3.0	1a369c146af7	stdlib@go1.21.5	1.25.13

Open the chart page →

871

frigateblakeblackshear

7.8.0

1 of 1 See more

frigate blakeblackshear 7.8.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/blakeblackshear/frigate :0.14.1	22e3d0b486df	golang.org/x/net@v0.8.0 stdlib@go1.17.1	0.55.0 1.25.13

Open the chart page →

3,007

kube-prometheuschoerodon

9.3.1

4 of 7 See more

kube-prometheus choerodon 9.3.1

4 of the 7 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
grafana/grafana :7.0.3	d72946c8e5d5	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.3	0.55.0 1.25.13
jettech/kube-webhook-certgen :v1.2.1	c42098c8d855	golang.org/x/net@v0.0.0-20190108225652-1e06a53dbb7e stdlib@go1.13.11	0.55.0 1.25.13
squareup/ghostunnel :v1.5.2	70f4cf270425	golang.org/x/net@v0.0.0-20191003171128-d98b1b443823 stdlib@go1.13.4	0.55.0 1.25.13
quay.io/prometheus/node-exporter :v1.0.0	8a3a33cad0bd	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120 stdlib@go1.14.3	0.55.0 1.25.13

Open the chart page →

12,257

cloudflare-ddnscloudflare

1.0.3

1 of 1 See more

cloudflare-ddns cloudflare 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/aureum-cloud/cloudflare-ddns :latest	aeb75d1605f4	stdlib@go1.23.12	1.25.13

Open the chart page →

307

timescaledbcloudpirates-timescaledb

0.13.11

1 of 1 See more

timescaledb cloudpirates-timescaledb 0.13.11

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
timescale/timescaledb :2.30.1-pg17	c79fa5891443	stdlib@go1.26.2	1.25.13

Open the chart page →

623

csi-secrets-store-provider-azurecsi-secrets-store-provider-azure

1.8.2

4 of 5 See more

csi-secrets-store-provider-azure csi-secrets-store-provider-azure 1.8.2

4 of the 5 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-node-driver-registrar :v2.14.0	6cb172e3de7e	golang.org/x/net@v0.40.0 stdlib@go1.26.5	0.55.0 1.25.13
mcr.microsoft.com/oss/v2/kubernetes-csi/livenessprobe :v2.15.0	59b9d0348428	golang.org/x/net@v0.39.0 stdlib@go1.25.7	0.55.0 1.25.13
mcr.microsoft.com/oss/v2/kubernetes-csi/secrets-store/driver :v1.5.6	5f91243cfd60	golang.org/x/net@v0.47.0 stdlib@go1.26.3	0.55.0 1.25.13
mcr.microsoft.com/oss/v2/kubernetes-csi/secrets-store/driver-crds :v1.5.6	cb0112636dc4	golang.org/x/net@v0.49.0 stdlib@go1.26.3	0.55.0 1.25.13

Open the chart page →

2,233

paperless-ngxfmjstudios

0.2.8

2 of 5 See more

paperless-ngx fmjstudios 0.2.8

2 of the 5 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
gotenberg/gotenberg :8.0.1	cf0b9a7ca3cf	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.55.0 1.25.13
ghcr.io/paperless-ngx/paperless-ngx :2.10.1	a132c2ac7c57	stdlib@go1.19.8	1.25.13

Open the chart page →

31,340

minifluxgabe565

0.9.2

1 of 2 See more

miniflux gabe565 0.9.2

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/miniflux/miniflux :2.2.5	bacc9b78ec61	golang.org/x/net@v0.34.0 stdlib@go1.23.5	0.55.0 1.25.13

Open the chart page →

1,394

cubestoregadsme

1.2.0

1 of 3 See more

cubestore gadsme 1.2.0

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
prom/statsd-exporter :v0.24.0	61d866e93b56	golang.org/x/net@v0.10.0 stdlib@go1.19.9	0.55.0 1.25.13

Open the chart page →

3,073

waypointhashicorp

0.1.21

1 of 2 See more

waypoint hashicorp 0.1.21

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
hashicorp/waypoint :0.11.3	97d521a27498	golang.org/x/net@v0.1.0 stdlib@go1.19.4	0.55.0 1.25.13

Open the chart page →

4,177

hivemq-operatorhivemq

0.11.62

1 of 2 See more

hivemq-operator hivemq 0.11.62

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.1.1	64d8c73dca98	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.16.9	0.55.0 1.25.13

Open the chart page →

8,048

jaeger-all-in-onejaeger-all-in-one

0.1.12

1 of 1 See more

jaeger-all-in-one jaeger-all-in-one 0.1.12

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
jaegertracing/all-in-one :1.55	f6b5d09073f1	golang.org/x/net@v0.21.0 stdlib@go1.22.0	0.55.0 1.25.13

Open the chart page →

1,231

cassandrakubelauncher

0.1.27

1 of 1 See more

cassandra kubelauncher 0.1.27

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/kubelauncher/cassandradigest-pinned	b66aba320083	stdlib@go1.26.5	1.25.13

Open the chart page →

1,608

etcdkubelauncher

0.4.3

1 of 1 See more

etcd kubelauncher 0.4.3

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/kubelauncher/etcddigest-pinned	8ab954711fb9	stdlib@go1.26.5	1.25.13

Open the chart page →

878

kafkakubelauncher

0.1.26

1 of 1 See more

kafka kubelauncher 0.1.26

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/kubelauncher/kafkadigest-pinned	43e1085cd0a8	stdlib@go1.26.5	1.25.13

Open the chart page →

1,492

keycloakkubelauncher

0.4.4

1 of 1 See more

keycloak kubelauncher 0.4.4

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/kubelauncher/keycloakdigest-pinned	afe3bd73d7cf	stdlib@go1.26.5	1.25.13

Open the chart page →

1,413

kubectlkubelauncher

0.2.11

1 of 1 See more

kubectl kubelauncher 0.2.11

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/kubelauncher/kubectldigest-pinned	7280594a2f18	golang.org/x/net@v0.49.0 stdlib@go1.26.5	0.55.0 1.25.13

Open the chart page →

1,327

Container images carrying it

5,406 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
public.ecr.aws/aws-secrets-manager/secrets-store-csi-driver-provider-aws :1.0.r1-10-g1942553-2021.06.04.00.07-linux-amd64	b32c99e7bc45	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.8	0.55.0 1.25.13	1
public.ecr.aws/boundless-software/switchblade :release-v0.0.19-lcm	01d8413d5075	golang.org/x/net@v0.21.0 stdlib@go1.23.9	0.55.0 1.25.13	1
public.ecr.aws/buildkite/agent-metrics :v5.11.0	16e7f5c7161e	golang.org/x/net@v0.43.0 stdlib@go1.25.1	0.55.0 1.25.13	1
public.ecr.aws/cloudnatix/llmariner/cluster-monitor-agent :0.10.2	6769c2275a43	golang.org/x/net@v0.38.0 stdlib@go1.23.11	0.55.0 1.25.13	1
public.ecr.aws/cloudnatix/llmariner/database-creator :1.19.1	62375abc3c56	stdlib@go1.23.12	1.25.13	1
public.ecr.aws/cloudnatix/llmariner/database-creator :1.17.0	97065ced2942	stdlib@go1.23.11	1.25.13	1
public.ecr.aws/cloudnatix/llmariner/inference-manager-server :1.46.0	0bbb5f5ddf71	golang.org/x/net@v0.48.0 stdlib@go1.25.9	0.55.0 1.25.13	1
public.ecr.aws/cloudnatix/llmariner/inference-manager-server :1.45.0	90b890f800ab	golang.org/x/net@v0.38.0 stdlib@go1.23.12	0.55.0 1.25.13	1
public.ecr.aws/cloudnatix/llmariner/job-manager-syncer :1.27.0	86957bbeeff5	golang.org/x/net@v0.38.0 stdlib@go1.23.12	0.55.0 1.25.13	1
public.ecr.aws/cloudnatix/llmariner/session-manager-agent :1.9.0	b9f23db99051	golang.org/x/net@v0.38.0 stdlib@go1.23.11	0.55.0 1.25.13	1
public.ecr.aws/cloudnatix/llmariner/session-manager-server :0.1.0-gfu-dev	b9537499ff9e	golang.org/x/net@v0.35.0 stdlib@go1.23.7	0.55.0 1.25.13	1
public.ecr.aws/cloudnatix/llmariner/session-manager-server :1.9.0	f24ecd37fbaa	golang.org/x/net@v0.38.0 stdlib@go1.23.11	0.55.0 1.25.13	1
public.ecr.aws/cloudnatix/llmariner/vector-store-manager-server :1.7.0	f1f6b884b325	golang.org/x/net@v0.38.0 stdlib@go1.23.11	0.55.0 1.25.13	1
public.ecr.aws/cloudpilotai/gcp/karpenter :v0.6.1	01946ed4e599	stdlib@go1.26.5	1.25.13	1
public.ecr.aws/csi-components/csi-node-driver-registrar :v2.16.0-eksbuild.3	592d7034d6c7	golang.org/x/net@v0.49.0 stdlib@go1.26.1	0.55.0 1.25.13	1
public.ecr.aws/csi-components/livenessprobe :v2.18.0-eksbuild.3	8e307f4e5820	golang.org/x/net@v0.49.0 stdlib@go1.26.1	0.55.0 1.25.13	1
public.ecr.aws/datadog/agent :7.73.0	f4925b15ce94	golang.org/x/net@v0.47.0 stdlib@go1.24.9	0.55.0 1.25.13	1
public.ecr.aws/datadog/cloudprem :v0.1.33	bda08753668d	stdlib@go1.25.12	1.25.13	1
public.ecr.aws/decisiveai/mdai-s3-logs-reader :0.0.8	d1e35167eec5	golang.org/x/net@v0.40.0 stdlib@go1.24.10	0.55.0 1.25.13	1
public.ecr.aws/diagrid-dev/diagrid-dashboard :latest	f1348a65664a	stdlib@go1.26.4	1.25.13	1
public.ecr.aws/docker/library/caddy :2.6.3	87cbd356af2e	golang.org/x/net@v0.5.0 stdlib@go1.20	0.55.0 1.25.13	1
public.ecr.aws/dynatrace/dynatrace-operator :v1.10.2	52281db48c93	stdlib@go1.26.5	1.25.13	1
public.ecr.aws/dynatrace/dynatrace-operator :v1.3.0	f68901a54664	golang.org/x/net@v0.28.0 stdlib@go1.22.5	0.55.0 1.25.13	1
public.ecr.aws/eks/amazon-eks-pod-identity-webhook :v0.6.17	3071570e8e8c	golang.org/x/net@v0.49.0 stdlib@go1.26.3	0.55.0 1.25.13	1
public.ecr.aws/eks-distro/kubernetes/kube-scheduler :v1.29.14-eks-1-29-latest	e7e1db003e6a	golang.org/x/net@v0.24.0 stdlib@go1.22.12	0.55.0 1.25.13	1
public.ecr.aws/flanksource/incident-manager-ui :v1.4.317	fea799d4fb2f	stdlib@go1.23.5	1.25.13	1
public.ecr.aws/g4a0y2u8/unifie-store :staging-19925	a2057fabc948	stdlib@go1.20.12	1.25.13	1
public.ecr.aws/groundcovercom/grafana-groundcover :v0.0.54-grafana11.3.7	ee9d973e3952	golang.org/x/net@v0.52.0 stdlib@go1.26.3	0.55.0 1.25.13	1
public.ecr.aws/groundcovercom/kong/kubernetes-ingress-controller :3.5.3-20260205	bf9db911deed	golang.org/x/net@v0.47.0 stdlib@go1.25.7	0.55.0 1.25.13	1
public.ecr.aws/groundcovercom/loki-proxy :0.1.1	783d550ad813	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.13	0.55.0 1.25.13	1
public.ecr.aws/groundcovercom/postgres :18.1-20260208	b7d7910c0bb0	stdlib@go1.25.7	1.25.13	1
public.ecr.aws/groundcovercom/temporalio/admin-tools :1.29.7-20260730-1	af8cea3b8538	stdlib@go1.26.5	1.25.13	1
public.ecr.aws/j1r0q0g6/notebooks/notebook-controller :v1.4	cac3ed9a9826	golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7 stdlib@go1.15.15	0.55.0 1.25.13	1
public.ecr.aws/j1r0q0g6/training/training-operator :760ac1171dd30039a7363ffa03c77454bd714da5	ae59d222fd87	golang.org/x/net@v0.0.0-20210405180319-a5a99cb37ef4 stdlib@go1.14.9	0.55.0 1.25.13	1
public.ecr.aws/k2x0t8t6/kubeadapt/app/kubeadapt-k8s-agent :v3.0.1	d75b6da94913	golang.org/x/net@v0.47.0 stdlib@go1.26.2	0.55.0 1.25.13	1
public.ecr.aws/k2x0t8t6/kubeadapt/app/kubeadapt-k8s-pulse :v3.0.1	dc5a516c2333	stdlib@go1.25.9	1.25.13	1
public.ecr.aws/k4y9r6y5/kratos :v25.4.0	e8014c6c58b6	golang.org/x/net@v0.44.0 stdlib@go1.25.2	0.55.0 1.25.13	1
public.ecr.aws/karpenter/controller :1.9.0	30a506c64fbb	golang.org/x/net@v0.48.0 stdlib@go1.25.7	0.55.0 1.25.13	1
public.ecr.aws/karpenter/controller :v0.19.3	f0e5ab60b2df	golang.org/x/net@v0.1.0 stdlib@go1.19.3	0.55.0 1.25.13	1
public.ecr.aws/karpenter/controller :1.1.1	fe383abf1dbc	golang.org/x/net@v0.30.0 stdlib@go1.23.2	0.55.0 1.25.13	1
public.ecr.aws/kyos/evicted-pod-reaper :1.0.0	b9d047442ce2	golang.org/x/net@v0.40.0 stdlib@go1.24.6	0.55.0 1.25.13	1
public.ecr.aws/lumigo/lumigo-kubernetes-operator :69	491c39346b19	golang.org/x/net@v0.38.0 stdlib@go1.23.12	0.55.0 1.25.13	1
public.ecr.aws/lumigo/lumigo-kubernetes-rbac-proxy :69	6c2f0585cd6c	golang.org/x/net@v0.10.0 stdlib@go1.22.12	0.55.0 1.25.13	1
public.ecr.aws/lumigo/lumigo-kubernetes-telemetry-proxy :69	1d548e59c2c8	golang.org/x/net@v0.41.0 stdlib@go1.24.5	0.55.0 1.25.13	1
public.ecr.aws/lumigo/lumigo-kubernetes-watchdog :69	6458fcd61e0c	golang.org/x/net@v0.37.0 stdlib@go1.23.12	0.55.0 1.25.13	1
public.ecr.aws/n8h5y2v5/rad-security/rad-bootstrapper :v1.1.11	5ca2d500d374	golang.org/x/net@v0.33.0 stdlib@go1.23.4	0.55.0 1.25.13	1
public.ecr.aws/n8h5y2v5/rad-security/rad-guard :v1.1.17	a94d2d4aae85	golang.org/x/net@v0.33.0 stdlib@go1.23.4	0.55.0 1.25.13	1
public.ecr.aws/n8h5y2v5/rad-security/rad-sbom :v1.1.34	e97e0e7a2088	golang.org/x/net@v0.33.0 stdlib@go1.23.4	0.55.0 1.25.13	1
public.ecr.aws/n8h5y2v5/rad-security/rad-sync :v1.1.15	14f3dfbc0225	golang.org/x/net@v0.33.0 stdlib@go1.23.4	0.55.0 1.25.13	1
public.ecr.aws/n8h5y2v5/rad-security/rad-watch :v1.1.25	b9a7d6bc2a0c	golang.org/x/net@v0.33.0 stdlib@go1.23.4	0.55.0 1.25.13	1