CVE-2026-39821

High

Advisory

Published 22 May 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 8.2; base score, highest
EPSS: 0.007; 51st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 4,519; of 17,797 indexed, latest versions
Container images: 5,266; deployed by those charts
Fix available: 3 of 3; affected packages

Red Hat Security Advisory: git-lfs security update

Carried by container images the latest versions of 4,519 of 17,797 indexed charts deploy, on 5,266 images.

Affected package	Affected versions	Fixed in	Images
git-lfsrpm	2.13.3-3.el8_6	0:3.4.1-11.el8_10	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+189 more	1.25.13	5,230
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+220 more	0.55.0	3,673

OSV records: RHSA-2026:30853 GO-2026-5026

Charts affected

4,519 by stars

Chart

Latest

Affected images

Radar Score

nexus-tasksnexus-tasks

2.0.0

1 of 5 See more

nexus-tasks nexus-tasks 2.0.0

1 of the 5 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/ashvinbambhaniya/nexus-tasks-backend :2.0.0	f80349eb018b	golang.org/x/net@v0.52.0 stdlib@go1.26.0	0.55.0 1.25.13

Open the chart page →

3,802

nginx-examplengrok-ingress-helm

0.3.0

1 of 2 See more

nginx-example ngrok-ingress-helm 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
wernight/ngrok :latest	d211f29ebcfe	golang.org/x/net@v0.17.0 stdlib@go1.21.6	0.55.0 1.25.13

Open the chart page →

2,989

cert-managernicklasfrahm-cert-manager

0.1.2

4 of 4 See more

cert-manager nicklasfrahm-cert-manager 0.1.2

4 of the 4 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-cainjector :v1.18.2	af59e01ad975	golang.org/x/net@v0.38.0 stdlib@go1.24.4	0.55.0 1.25.13
quay.io/jetstack/cert-manager-controller :v1.18.2	81316365dc0b	golang.org/x/net@v0.38.0 stdlib@go1.24.4	0.55.0 1.25.13
quay.io/jetstack/cert-manager-startupapicheck :v1.18.2	1075e0974151	golang.org/x/net@v0.38.0 stdlib@go1.24.4	0.55.0 1.25.13
quay.io/jetstack/cert-manager-webhook :v1.18.2	9431f0d8b510	golang.org/x/net@v0.38.0 stdlib@go1.24.4	0.55.0 1.25.13

Open the chart page →

2,840

ciliumnicklasfrahm-cilium

0.7.4

5 of 6 See more

cilium nicklasfrahm-cilium 0.7.4

5 of the 6 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
quay.io/cilium/cilium :v1.18.2	858f807ea4e2	golang.org/x/net@v0.41.0 stdlib@go1.24.2	0.55.0 1.25.13
quay.io/cilium/cilium-envoy :v1.34.7-1757592137-1a52bb680a956879722f48c591a2ca90f7791324	7932d656b63f	golang.org/x/net@v0.41.0 stdlib@go1.24.7	0.55.0 1.25.13
quay.io/cilium/hubble-relay :v1.18.2	6079308ee15e	golang.org/x/net@v0.42.0 stdlib@go1.24.7	0.55.0 1.25.13
quay.io/cilium/hubble-ui-backend :v0.13.3	db1454e45dc3	golang.org/x/net@v0.42.0 stdlib@go1.24.5	0.55.0 1.25.13
quay.io/cilium/operator-generic :v1.18.2	cb4e4ffc5789	golang.org/x/net@v0.42.0 stdlib@go1.24.7	0.55.0 1.25.13

Open the chart page →

7,237

metrics-servernicklasfrahm-metrics-server

0.1.1

1 of 1 See more

metrics-server nicklasfrahm-metrics-server 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
registry.k8s.io/metrics-server/metrics-server :v0.8.0	89258156d0e9	golang.org/x/net@v0.40.0 stdlib@go1.24.4	0.55.0 1.25.13

Open the chart page →

792

librenmsnimbolus

0.5.1

1 of 3 See more

librenms nimbolus 0.5.1

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
librenms/librenms :24.11.0	0920bc9117a8	stdlib@go1.21.5	1.25.13

Open the chart page →

2,292

node-upgrade-channelnimbolus

0.1.1

1 of 1 See more

node-upgrade-channel nimbolus 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/nimbolus/k8s-openstack-node-upgrade-agent :0.1.0	e0c7cf2415f0	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.17.6	0.55.0 1.25.13

Open the chart page →

2,063

terraform-backendnimbolus

0.3.2

1 of 2 See more

terraform-backend nimbolus 0.3.2

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/nimbolus/terraform-backend :0.2.2	bf876252fbe1	golang.org/x/net@v0.46.0 stdlib@go1.24.13	0.55.0 1.25.13

Open the chart page →

2,492

yopassnimbolus

0.6.1

1 of 2 See more

yopass nimbolus 0.6.1

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
jhaals/yopass :11.17.0	26873480863b	stdlib@go1.20.5	1.25.13

Open the chart page →

1,832

airflownineinfra-charts

1.12.1

2 of 4 See more

airflow nineinfra-charts 1.12.1

2 of the 4 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/redis :7-bullseye	6a5130174e14	stdlib@go1.18.2	1.25.13
quay.io/prometheus/statsd-exporter :v0.22.8	f53cca722a03	stdlib@go1.18.6	1.25.13

Open the chart page →

2,259

cloudnative-pgnineinfra-charts

0.19.1

1 of 1 See more

cloudnative-pg nineinfra-charts 0.19.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/cloudnative-pg/cloudnative-pg :1.21.1	9f707d91de1c	golang.org/x/net@v0.17.0 stdlib@go1.21.3	0.55.0 1.25.13

Open the chart page →

1,188

doris-operatornineinfra-charts

1.3.1

1 of 1 See more

doris-operator nineinfra-charts 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
selectdb/doris.k8s-operator :1.3.1	919210765cb8	golang.org/x/net@v0.10.0 stdlib@go1.19.13	0.55.0 1.25.13

Open the chart page →

870

hdfs-operatornineinfra-charts

0.7.0

1 of 1 See more

hdfs-operator nineinfra-charts 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
nineinfra/hdfs-operator :v0.7.0	debb1e3410e2	golang.org/x/net@v0.17.0 stdlib@go1.21.3	0.55.0 1.25.13

Open the chart page →

723

kyuubi-operatornineinfra-charts

0.7.0

1 of 1 See more

kyuubi-operator nineinfra-charts 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
nineinfra/kyuubi-operator :v0.7.0	8d8ed87ef77c	golang.org/x/net@v0.13.0 stdlib@go1.20.8	0.55.0 1.25.13

Open the chart page →

815

metastore-operatornineinfra-charts

0.7.0

1 of 1 See more

metastore-operator nineinfra-charts 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
nineinfra/metastore-operator :v0.7.0	11259032fb04	golang.org/x/net@v0.13.0 stdlib@go1.20.8	0.55.0 1.25.13

Open the chart page →

815

minio-directpvnineinfra-charts

4.0.8

5 of 5 See more

minio-directpv nineinfra-charts 4.0.8

5 of the 5 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
quay.io/minio/csi-node-driver-registrardigest-pinned	c805fdc16676	golang.org/x/net@v0.8.0 stdlib@go1.20.3	0.55.0 1.25.13
quay.io/minio/csi-provisionerdigest-pinned	7b5c070ec70d	golang.org/x/net@v0.8.0 stdlib@go1.20.3	0.55.0 1.25.13
quay.io/minio/csi-resizerdigest-pinned	819f68a4daf7	golang.org/x/net@v0.8.0 stdlib@go1.20.3	0.55.0 1.25.13
quay.io/minio/directpv :v4.0.8	4560083eb77d	golang.org/x/net@v0.8.0 stdlib@go1.21.0	0.55.0 1.25.13
quay.io/minio/livenessprobedigest-pinned	f3bc9a84f149	golang.org/x/net@v0.8.0 stdlib@go1.20.3	0.55.0 1.25.13

Open the chart page →

7,070

minio-operatornineinfra-charts

5.0.9

1 of 1 See more

minio-operator nineinfra-charts 5.0.9

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
minio/operator :v5.0.9	170b154d2c61	golang.org/x/net@v0.13.0 stdlib@go1.21.1	0.55.0 1.25.13

Open the chart page →

3,425

nineinfranineinfra-charts

0.7.0

1 of 1 See more

nineinfra nineinfra-charts 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
nineinfra/nineinfra :v0.7.0	d4aad414eccd	golang.org/x/net@v0.17.0 stdlib@go1.21.3	0.55.0 1.25.13

Open the chart page →

1,120

redisnineinfra-charts

0.7.5

1 of 1 See more

redis nineinfra-charts 0.7.5

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/redis :7.2.3	a7cee7c8178f	stdlib@go1.18.2	1.25.13

Open the chart page →

3,950

supersetnineinfra-charts

0.11.2

1 of 4 See more

superset nineinfra-charts 0.11.2

1 of the 4 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
apache/superset :dockerize	afe59523a6c8	golang.org/x/net@v0.10.0 stdlib@go1.20.4	0.55.0 1.25.13

Open the chart page →

1,439

zookeeper-operatornineinfra-charts

0.7.0

1 of 1 See more

zookeeper-operator nineinfra-charts 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
nineinfra/zookeeper-operator :v0.7.0	af6eb2f37bfc	golang.org/x/net@v0.17.0 stdlib@go1.21.3	0.55.0 1.25.13

Open the chart page →

723

base-jobnn-co

0.1.0

1 of 4 See more

base-job nn-co 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/ubuntu :latest	2260313b31c8	stdlib@go1.26.5	1.25.13

Open the chart page →

749

node-debug-dashboardnode-debug-dashboard

0.3.2

1 of 1 See more

node-debug-dashboard node-debug-dashboard 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/samr037/node-debug-dashboard :0.3.0	c79b2e64a211	golang.org/x/net@v0.30.0 stdlib@go1.23.3	0.55.0 1.25.13

Open the chart page →

6,977

cosmoshub-rpcnodeify

1.0.7

1 of 2 See more

cosmoshub-rpc nodeify 1.0.7

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/cosmos/gaia :v25.1.0	f115777d1112	golang.org/x/net@v0.40.0 stdlib@go1.24.5	0.55.0 1.25.13

Open the chart page →

2,015

cosmos-nodenodeify

2.6.0

1 of 2 See more

cosmos-node nodeify 2.6.0

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/cosmos/gaia :v25.1.0	f115777d1112	golang.org/x/net@v0.40.0 stdlib@go1.24.5	0.55.0 1.25.13

Open the chart page →

2,015

firehose-corenodeify

1.2.6

1 of 2 See more

firehose-core nodeify 1.2.6

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/streamingfast/firehose-core :v1.12.3	91fca773a63f	golang.org/x/net@v0.41.0 stdlib@go1.24.10	0.55.0 1.25.13

Open the chart page →

6,586

firehose-ethereumnodeify

1.7.1

1 of 2 See more

firehose-ethereum nodeify 1.7.1

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/streamingfast/go-ethereum :geth-v1.16.9-fh3.0	8e3cb38953a3	golang.org/x/net@v0.47.0 stdlib@go1.25.7	0.55.0 1.25.13

Open the chart page →

5,695

indexer-toolsnodeify

2.1.1

1 of 1 See more

indexer-tools nodeify 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/vincenttaglia/indexer-tools :v3.4.4	5bae30456ddb	stdlib@go1.19.3	1.25.13

Open the chart page →

2,919

substreams-tier-2nodeify

1.1.3

1 of 1 See more

substreams-tier-2 nodeify 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/streamingfast/firehose-ethereum :v2.14.3	bf816072380e	golang.org/x/net@v0.0.0-20220812174116-3211cb980234 stdlib@go1.18.5	0.55.0 1.25.13

Open the chart page →

4,756

nodejsweeklynodejsweekly

1.1.0

1 of 1 See more

nodejsweekly nodejsweekly 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
zufardhiyaulhaq/nodejsweekly :v1.1.0	306859a3f167	golang.org/x/net@v0.0.0-20211015210444-4f30a5c0130f stdlib@go1.16.15	0.55.0 1.25.13

Open the chart page →

1,489

node-labels-exporternode-labels-exporter

0.1.9

1 of 1 See more

node-labels-exporter node-labels-exporter 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/sergelogvinov/node-labels-exporter :v0.5.1	dd6875a0a963	golang.org/x/net@v0.48.0 stdlib@go1.25.5	0.55.0 1.25.13

Open the chart page →

292

grafananodepulse

7.1.0

1 of 1 See more

grafana nodepulse 7.1.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
grafana/grafana :10.2.3	6b5b37eb35bb	golang.org/x/net@v0.19.0 stdlib@go1.21.3	0.55.0 1.25.13

Open the chart page →

2,973

prometheusnodepulse

25.0.0

6 of 6 See more

prometheus nodepulse 25.0.0

6 of the 6 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
quay.io/prometheus-operator/prometheus-config-reloader :v0.67.0	14feefde1b80	golang.org/x/net@v0.12.0 stdlib@go1.20.6	0.55.0 1.25.13
quay.io/prometheus/alertmanager :v0.26.0	361db356b330	golang.org/x/net@v0.10.0 stdlib@go1.20.7	0.55.0 1.25.13
quay.io/prometheus/node-exporter :v1.6.1	81f94e50ea37	golang.org/x/net@v0.10.0 stdlib@go1.20.6	0.55.0 1.25.13
quay.io/prometheus/prometheus :v2.47.0	c5dd35038287	golang.org/x/net@v0.12.0 stdlib@go1.21.0	0.55.0 1.25.13
quay.io/prometheus/pushgateway :v1.6.0	5111de00e969	golang.org/x/net@v0.10.0 stdlib@go1.20.4	0.55.0 1.25.13
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.10.0	ec5d6f6be228	golang.org/x/net@v0.10.0 stdlib@go1.20.7	0.55.0 1.25.13

Open the chart page →

7,748

nominatimnominatim-chart

1.3.0

1 of 3 See more

nominatim nominatim-chart 1.3.0

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
robjuz/postgresql-nominatim :latest	805c7bab76df	stdlib@go1.16.5	1.25.13

Open the chart page →

22,795

file-system-ms-helm-chartnotesprojectchart

0.1.0

1 of 2 See more

file-system-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/postgres :latest	4ef4dbc939d6	stdlib@go1.24.6	1.25.13

Open the chart page →

5,919

ingress-helm-chartnotesprojectchart

0.1.0

2 of 2 See more

ingress-helm-chart notesprojectchart 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/controller :v1.8.1	e5c4824e7375	golang.org/x/net@v0.10.0 stdlib@go1.20.5	0.55.0 1.25.13
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20230407	543c40fd0939	golang.org/x/net@v0.7.0 stdlib@go1.20.1	0.55.0 1.25.13

Open the chart page →

2,956

kafka-helm-chartnotesprojectchart

0.1.0

1 of 1 See more

kafka-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
wurstmeister/kafka :latest	2d4bbf9cc83d	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f stdlib@go1.17.10	0.55.0 1.25.13

Open the chart page →

4,558

keycloak-helm-chartnotesprojectchart

0.1.0

1 of 2 See more

keycloak-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/postgres :latest	4ef4dbc939d6	stdlib@go1.24.6	1.25.13

Open the chart page →

1,667

logic-ms-helm-chartnotesprojectchart

0.1.0

1 of 2 See more

logic-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/postgres :latest	4ef4dbc939d6	stdlib@go1.24.6	1.25.13

Open the chart page →

6,896

registration-ms-helm-chartnotesprojectchart

0.1.0

1 of 2 See more

registration-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/postgres :latest	4ef4dbc939d6	stdlib@go1.24.6	1.25.13

Open the chart page →

5,960

user-data-ms-helm-chartnotesprojectchart

0.1.0

1 of 2 See more

user-data-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/postgres :latest	4ef4dbc939d6	stdlib@go1.24.6	1.25.13

Open the chart page →

5,917

vault-helm-chartnotesprojectchart

0.1.0

1 of 1 See more

vault-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
library/vault :1.13.3	f98ac9dd97b0	golang.org/x/net@v0.8.0 stdlib@go1.20.4	0.55.0 1.25.13

Open the chart page →

2,254

notification-componentnotification-component

1.0.0

1 of 4 See more

notification-component notification-component 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/notification-component-php :latest	cd9656e6bc2c	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.55.0 1.25.13

Open the chart page →

7,537

clusterfannousefreak

0.1.2

1 of 1 See more

clusterfan nousefreak 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/nousefreak/clusterfan :v0.1.0	4ea05e2a7b57	stdlib@go1.17.5	1.25.13

Open the chart page →

1,791

giteanovum-rgi-charts

2.1.3

1 of 3 See more

gitea novum-rgi-charts 2.1.3

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
gitea/gitea :1.13.0	d5ab14cd29af	golang.org/x/net@v0.0.0-20200904194848-62affa334b73 stdlib@go1.15.5	0.55.0 1.25.13

Open the chart page →

4,861

nfs-server-provisionernovum-rgi-charts

1.1.2

1 of 1 See more

nfs-server-provisioner novum-rgi-charts 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
quay.io/kubernetes_incubator/nfs-provisioner :v2.3.0	f402e6039b3c	golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc stdlib@go1.13.4	0.55.0 1.25.13

Open the chart page →

2,806

example-dev-toolsnoygal

0.2.8

1 of 3 See more

example-dev-tools noygal 0.2.8

1 of the 3 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
linuxserver/cloud9 :latest	45c5fe102ff3	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b stdlib@go1.17.11	0.55.0 1.25.13

Open the chart page →

27,548

nri-plugin-runtimenri-plugin-runtime

0.0.3

1 of 1 See more

nri-plugin-runtime nri-plugin-runtime 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/bodgit/nri-plugin-runtime :v0.0.3	130c0b1b6fa3	stdlib@go1.26.4	1.25.13

Open the chart page →

154

nri-memory-policynri-plugins

0.14.0

1 of 1 See more

nri-memory-policy nri-plugins 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/containers/nri-plugins/nri-memory-policy :v0.14.0	531d21ec4ba2	stdlib@go1.26.0	1.25.13

Open the chart page →

272

nri-memory-qosnri-plugins

0.14.0

1 of 1 See more

nri-memory-qos nri-plugins 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-39821.

Container image	Digest	Package	Fixed in
ghcr.io/containers/nri-plugins/nri-memory-qos :v0.14.0	c7c5c24ed894	stdlib@go1.26.0	1.25.13

Open the chart page →

272

Container images carrying it

5,266 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.13	89
library/postgres :18 :18.6 :18.6-trixie :latest	4ef4dbc939d6	stdlib@go1.24.6	1.25.13	69
library/mysql :5.7	4bc6bc963e6d	stdlib@go1.18.2	1.25.13	22
library/postgres :16.15-alpine :16-alpine	cf78e76683b9	stdlib@go1.24.6	1.25.13	17
library/postgres :18.6-alpine :18-alpine :alpine	d3e1620b530c	stdlib@go1.24.6	1.25.13	17
library/mysql :8 :8.4 :8.4.11	b3b90af2a655	stdlib@go1.24.6	1.25.13	16
minio/minio :latest :RELEASE.2025-09-07T16-13-09Z	14cea493d9a3	golang.org/x/net@v0.39.0 stdlib@go1.24.6	0.55.0 1.25.13	15
jimmidyson/configmap-reload :v0.5.0	904d08e9f701	stdlib@go1.15.7	1.25.13	14
codeurjc/toposervice :v1.0 :v1.23	9fb4c11e6a49	golang.org/x/net@v0.7.0 stdlib@go1.18.10	0.55.0 1.25.13	13
jenkins/jenkins :2.568.3-jdk21 :2.568.3-lts-jdk21 :lts	c1e4c349365f	golang.org/x/net@v0.38.0 stdlib@go1.25.3	0.55.0 1.25.13	13
library/postgres :17-alpine	18cfe3ef5e68	stdlib@go1.24.6	1.25.13	13
ghcr.io/appscode/kubectl-nonroot :1.34	0b26892cec94	golang.org/x/net@v0.38.0 stdlib@go1.24.13	0.55.0 1.25.13	13
grafana/grafana :latest	f772d434e8fa	golang.org/x/net@v0.51.0 stdlib@go1.26.5	0.55.0 1.25.13	12
library/postgres :16	f1c3376c26f2	stdlib@go1.24.6	1.25.13	12
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.18.0	1545919b72e3	golang.org/x/net@v0.48.0 stdlib@go1.25.5	0.55.0 1.25.13	12
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.17.0	f9de845b1701	golang.org/x/net@v0.54.0 stdlib@go1.26.3	0.55.0 1.25.13	12
library/mariadb :12.3.3 :latest :lts	dd9b303aed4f	stdlib@go1.24.6	1.25.13	11
library/mongo :8 :8.3.8 :latest	5211c51171f5	stdlib@go1.26.5	1.25.13	11
library/mysql :8.0.28	fc77d54cacef	stdlib@go1.16.7	1.25.13	11
library/postgres :15-alpine	fe0737ba566a	stdlib@go1.24.6	1.25.13	11
bitnami/mongodb :latest	e46cffb66274	stdlib@go1.26.5	1.25.13	10
ethpandaops/xatu :latest	74d4cf2c436c	golang.org/x/net@v0.54.0 stdlib@go1.26.5	0.55.0 1.25.13	10
jwilder/dockerize :latest	f94fb59fb4f6	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.55.0 1.25.13	10
library/mongo :5.0.6-focal	8e70544b6c76	stdlib@go1.16.7	1.25.13	10
library/postgres :17	67f41722b7a8	stdlib@go1.24.6	1.25.13	10
registry.k8s.io/sig-storage/csi-provisioner :v6.3.0	a4b0b1a37605	stdlib@go1.26.3	1.25.13	10
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/net@v0.23.0 stdlib@go1.22.5	0.55.0 1.25.13	9
library/rabbitmq :3.13-management :3-management	e582c0bc7766	stdlib@go1.22.2	1.25.13	8
prom/pushgateway :v1.4.2	a684e7c830a4	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.16.9	0.55.0 1.25.13	8
quay.io/prometheus/alertmanager :v0.27.0	e13b6ed5cb92	golang.org/x/net@v0.20.0 stdlib@go1.21.7	0.55.0 1.25.13	8
quay.io/prometheus/node-exporter :latest :v1.12.1	1b4e4438faca	stdlib@go1.26.5	1.25.13	8
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120 stdlib@go1.14.4	0.55.0 1.25.13	8
library/postgres :14	156f0b253fd6	stdlib@go1.24.6	1.25.13	7
osixia/openldap :1.5.0	18742e9c449c	golang.org/x/net@v0.0.0-20201010224723-4f7140c49acb stdlib@go1.15.5	0.55.0 1.25.13	7
wurstmeister/kafka :latest	2d4bbf9cc83d	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f stdlib@go1.17.10	0.55.0 1.25.13	7
ghcr.io/appscode/b3 :v2026.9.11	76d28575b71c	golang.org/x/net@v0.38.0 stdlib@go1.25.3	0.55.0 1.25.13	7
ghcr.io/paperless-ngx/paperless-ngx :3.1.3	aa810a36942c	stdlib@go1.24.4	1.25.13	7
public.ecr.aws/aktosecurity/confluentinc-cp-kafka :8.2.2 :8.2.2-1-ubi9	8e01c0305844	stdlib@go1.26.4	1.25.13	7
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	golang.org/x/net@v0.29.0 stdlib@go1.23.4	0.55.0 1.25.13	7
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	golang.org/x/net@v0.29.0 stdlib@go1.23.4	0.55.0 1.25.13	7
quay.io/openshift/origin-cli :latest	605eaa5d469c	stdlib@go1.26.5	1.25.13	7
quay.io/prometheus/node-exporter :v1.12.1-distroless	8c9bac11973b	stdlib@go1.26.5	1.25.13	7
quay.io/thanos/thanos :v0.37.2	4ec6df40fdb9	golang.org/x/net@v0.30.0 stdlib@go1.23.4	0.55.0 1.25.13	7
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.19.1	85108987d044	stdlib@go1.26.4	1.25.13	7
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.15.0	11f199f6bec4	golang.org/x/net@v0.40.0 stdlib@go1.24.6	0.55.0 1.25.13	7
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.16.0	ab482308a492	golang.org/x/net@v0.49.0 stdlib@go1.25.7	0.55.0 1.25.13	7
registry.k8s.io/sig-storage/csi-resizer :v2.1.0	589e525cddef	golang.org/x/net@v0.48.0 stdlib@go1.25.7	0.55.0 1.25.13	7
registry.k8s.io/sig-storage/csi-resizer :v1.14.0	5e7cbb63fd49	golang.org/x/net@v0.39.0 stdlib@go1.24.2	0.55.0 1.25.13	7
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	golang.org/x/net@v0.14.0 stdlib@go1.19.12	0.55.0 1.25.13	6
bitnamilegacy/redis :8.2.1-debian-12-r0	25bf63f3caf7	stdlib@go1.25.0	1.25.13	6