CVE-2026-39822

Unscored

Advisory

Published 7 Jul 2026In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.002; 14th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 4,226; of 17,790 indexed, latest versions
Container images: 4,913; deployed by those charts
Fix available: 1 of 1; affected package

Root escape via symlink plus trailing slash in os

Carried by container images the latest versions of 4,226 of 17,790 indexed charts deploy, on 4,913 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+186 more	1.25.12	4,913

OSV records: GO-2026-4970
Also known as: BIT-golang-2026-39822

Charts affected

4,226 by stars

Chart

Latest

Affected images

Radar Score

stable-hacalltelemetry

0.11.4

3 of 7 See more

stable-ha calltelemetry 0.11.4

3 of the 7 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
library/nats :2.10.12-alpine	bca70839d953	stdlib@go1.21.8	1.25.12
natsio/nats-box :0.14.2	e808e0644ce1	stdlib@go1.21.5	1.25.12
natsio/nats-server-config-reloader :0.14.1	0d50270fa374	stdlib@go1.20.5	1.25.12

Open the chart page →

4,705

pagescamden-pages

1.0.0

1 of 3 See more

pages camden-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.12

Open the chart page →

20,242

camellia-redis-proxycamellia-redis-proxy

1.4.0

1 of 2 See more

camellia-redis-proxy camellia-redis-proxy 1.4.0

1 of the 2 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
library/redis :5.0	fc5ecd863862	stdlib@go1.16.7	1.25.12

Open the chart page →

8,024

geoservercamptocamp2

0.0.3

1 of 12 See more

geoserver camptocamp2 0.0.3

1 of the 12 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
library/postgres :12	2f2a8c2a7d10	stdlib@go1.18.2	1.25.12

Open the chart page →

88,618

bucket-clonercamptocamp3

1.0.4

1 of 1 See more

bucket-cloner camptocamp3 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
camptocamp/bucket-cloner :latest	acfafc308d88	stdlib@go1.16.5	1.25.12

Open the chart page →

4,525

getconfigcamptocamp3

0.1.1

1 of 1 See more

getconfig camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
quay.io/oauth2-proxy/oauth2-proxy :v7.3.0	8c21390be87d	stdlib@go1.17.10	1.25.12

Open the chart page →

2,201

prometheus-puppetdb-sdcamptocamp3

8.0.2

1 of 2 See more

prometheus-puppetdb-sd camptocamp3 8.0.2

1 of the 2 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
ghcr.io/camptocamp/prometheus-puppetdb-sd :0.14.0	414c0c99fd06	stdlib@go1.23.5	1.25.12

Open the chart page →

6,153

redisoperatorcamptocamp3

3.0.1

1 of 1 See more

redisoperator camptocamp3 3.0.1

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
quay.io/spotahome/redis-operator :latest	8c772955184e	stdlib@go1.20.7	1.25.12

Open the chart page →

1,193

s3-exportercamptocamp3

2.2.0

1 of 1 See more

s3-exporter camptocamp3 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
ribbybibby/s3-exporter :v0.5.0	998184c51a00	stdlib@go1.15.15	1.25.12

Open the chart page →

1,183

snyk-exportercamptocamp3

0.1.4

1 of 1 See more

snyk-exporter camptocamp3 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
quay.io/lunarway/snyk_exporter :v1.11.1	55e5cc5aaa0a	stdlib@go1.17.7	1.25.12

Open the chart page →

1,079

ssl-exportercamptocamp3

0.1.0

1 of 1 See more

ssl-exporter camptocamp3 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
ribbybibby/ssl-exporter :2.4.2	718abe7f5e79	stdlib@go1.18.3	1.25.12

Open the chart page →

1,632

terraboardcamptocamp3

2.4.0

1 of 1 See more

terraboard camptocamp3 2.4.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
ghcr.io/camptocamp/terraboard :v2.3.0	df53e2c8998c	stdlib@go1.21.3	1.25.12

Open the chart page →

1,336

apachecamptocamp-apache

0.4.0

1 of 2 See more

apache camptocamp-apache 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
quay.io/lusitaniae/apache-exporter :latest	438b1b6177eb	stdlib@go1.25.11	1.25.12

Open the chart page →

1,490

caninecanine

0.1.10

6 of 7 See more

canine canine 0.1.10

6 of the 7 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
library/traefik :v3.7.1	6b9cbca6fac4	stdlib@go1.25.10	1.25.12
ghcr.io/caninehq/canine :latest	a058034ca006	stdlib@go1.22.7	1.25.12
quay.io/jetstack/cert-manager-cainjector :v1.15.3	e0ce8ae280c8	stdlib@go1.22.5	1.25.12
quay.io/jetstack/cert-manager-controller :v1.15.3	eee34b3de2dd	stdlib@go1.22.5	1.25.12
quay.io/jetstack/cert-manager-startupapicheck :v1.15.3	4cbc1b022a23	stdlib@go1.22.5	1.25.12
quay.io/jetstack/cert-manager-webhook :v1.15.3	fdcb9ac4963f	stdlib@go1.22.5	1.25.12

Open the chart page →

14,179

cert-managercanine

1.15.3

4 of 4 See more

cert-manager canine 1.15.3

4 of the 4 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-cainjector :v1.15.3	e0ce8ae280c8	stdlib@go1.22.5	1.25.12
quay.io/jetstack/cert-manager-controller :v1.15.3	eee34b3de2dd	stdlib@go1.22.5	1.25.12
quay.io/jetstack/cert-manager-startupapicheck :v1.15.3	4cbc1b022a23	stdlib@go1.22.5	1.25.12
quay.io/jetstack/cert-manager-webhook :v1.15.3	fdcb9ac4963f	stdlib@go1.22.5	1.25.12

Open the chart page →

2,894

traefikcanine

40.2.0

1 of 1 See more

traefik canine 40.2.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
library/traefik :v3.7.1	6b9cbca6fac4	stdlib@go1.25.10	1.25.12

Open the chart page →

1,028

capi2argo-cluster-operatorcapi2argo

1.5.0

1 of 1 See more

capi2argo-cluster-operator capi2argo 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
ghcr.io/dntosas/capi2argo-cluster-operator :v1.5.0	fb8c6457ef6e	stdlib@go1.25.6	1.25.12

Open the chart page →

281

capsule-argo-addoncapsule-argo-addon

0.7.5

2 of 2 See more

capsule-argo-addon capsule-argo-addon 0.7.5

2 of the 2 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
clastix/kubectl :v1.31	22918a06c253	stdlib@go1.22.5	1.25.12
ghcr.io/peak-scale/capsule-argo-addon :0.7.5	087a80163971	stdlib@go1.24.13	1.25.12

Open the chart page →

2,046

freebox-exportercaptnbp

1.0.0

1 of 1 See more

freebox-exporter captnbp 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
captnbp/freebox-exporter :1.0.0-r0	1600c5a253e0	stdlib@go1.21.3	1.25.12

Open the chart page →

717

ranchercarbide-charts

2.15.1

1 of 2 See more

rancher carbide-charts 2.15.1

1 of the 2 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
rancher/rancher :v2.15.1	5f6c4dc52a05	stdlib@go1.26.4	1.25.12

Open the chart page →

1,487

stigatroncarbide-charts

0.4.1

3 of 10 See more

stigatron carbide-charts 0.4.1

3 of the 10 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
library/nats :2.10.5-alpine	85319e5e541b	stdlib@go1.21.4	1.25.12
natsio/nats-box :0.14.1	a67913df95f1	stdlib@go1.21.3	1.25.12
natsio/nats-server-config-reloader :0.13.0	b3359eeb10bf	stdlib@go1.20.5	1.25.12

Open the chart page →

4,423

pagescarina-pages

1.0.0

1 of 3 See more

pages carina-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.12

Open the chart page →

20,242

pagescarmel-pages-dell

1.0.0

1 of 3 See more

pages carmel-pages-dell 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.12

Open the chart page →

20,242

casdoor-helm-chartscasdoor

4.4.0

1 of 1 See more

casdoor-helm-charts casdoor 4.4.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
casbin/casdoor :4.4.0	8511c0757ac3	stdlib@go1.25.8	1.25.12

Open the chart page →

1,110

cassandra-webcassandra-web

0.1.0

1 of 1 See more

cassandra-web cassandra-web 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
ipushc/cassandra-web :latest	fa3e0c66c289	stdlib@go1.20.2	1.25.12

Open the chart page →

1,301

castai-evictorcastai

0.35.145

1 of 3 See more

castai-evictor castai 0.35.145

1 of the 3 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
registry.k8s.io/kubectl :v1.35.6	4d8c68e8c2bf	stdlib@go1.25.11	1.25.12

Open the chart page →

144

castai-tetragoncastai

0.6.1

2 of 4 See more

castai-tetragon castai 0.6.1

2 of the 4 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
quay.io/cilium/tetragon-ci :b6f3056a3f6cf05e366a3e07348f7c0b6265a60f	5efd991d218b	stdlib@go1.19.2	1.25.12
quay.io/cilium/tetragon-operator :v0.8.3	4ab8e6604204	stdlib@go1.18.3	1.25.12

Open the chart page →

4,143

castware-componentscastai

0.4.0

1 of 1 See more

castware-components castai 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
lachlanevenson/k8s-kubectl :v1.25.4	af5cea3f2e40	stdlib@go1.19.3	1.25.12

Open the chart page →

3,451

oci-csi-drivercastai

1.13.8

6 of 7 See more

oci-csi-driver castai 1.13.8

6 of the 7 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-attacher :v4.12.0	b9dc9a714a48	stdlib@go1.26.3	1.25.12
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.17.0	f9de845b1701	stdlib@go1.26.3	1.25.12
registry.k8s.io/sig-storage/csi-provisioner :v6.3.0	a4b0b1a37605	stdlib@go1.26.3	1.25.12
registry.k8s.io/sig-storage/csi-resizer :v2.2.0	a2d40c1c3ccb	stdlib@go1.26.3	1.25.12
registry.k8s.io/sig-storage/csi-snapshotter :v8.6.0	42af0929bcd6	stdlib@go1.26.3	1.25.12
registry.k8s.io/sig-storage/snapshot-controller :v8.6.0	81e79f205083	stdlib@go1.26.3	1.25.12

Open the chart page →

1,739

temporalcastai

0.54.2

10 of 14 See more

temporal castai 0.54.2

10 of the 14 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
grafana/grafana :11.0.0	0dc5a246ab16	stdlib@go1.21.10	1.25.12
temporalio/admin-tools :1.26.2	37e2e33dbd7b	stdlib@go1.22.5	1.25.12
temporalio/server :1.26.2	1e2626efcbc1	stdlib@go1.23.2	1.25.12
temporalio/ui :2.33.0	5c586a3c8ec5	stdlib@go1.23.0	1.25.12
quay.io/prometheus-operator/prometheus-config-reloader :v0.74.0	d55631c7a740	stdlib@go1.22.3	1.25.12
quay.io/prometheus/alertmanager :v0.27.0	e13b6ed5cb92	stdlib@go1.21.7	1.25.12
quay.io/prometheus/node-exporter :v1.8.1	fa7fa12a57ef	stdlib@go1.22.3	1.25.12
quay.io/prometheus/prometheus :v2.53.0	075b1ba2c4eb	stdlib@go1.22.4	1.25.12
quay.io/prometheus/pushgateway :v1.8.0	c159e946abf4	stdlib@go1.22.1	1.25.12
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.12.0	b401fae262a5	stdlib@go1.21.8	1.25.12

Open the chart page →

16,232

catalyst-agentscatalyst-agents

0.1.31

11 of 18 See more

catalyst-agents catalyst-agents 0.1.31

11 of the 18 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
alpine/k8s :1.32.3	eec354133193	stdlib@go1.23.6	1.25.12
grafana/grafana :13.1.3	ab5cb380e3ff	stdlib@go1.26.3	1.25.12
grafana/loki :3.0.0	757b5fadf816	stdlib@go1.21.9	1.25.12
grafana/loki-canary :3.0.0	28d7c00588aa	stdlib@go1.21.9	1.25.12
grafana/tempo :2.5.0	f0200a9bff6d	stdlib@go1.21.3	1.25.12
otel/opentelemetry-collector-contrib :0.156.0	125bdbeb7590	stdlib@go1.26.4	1.25.12
prom/memcached-exporter :v0.14.2	d8a61419b841	stdlib@go1.21.5	1.25.12
ghcr.io/chaos-mesh/chaos-coredns :v0.2.8	38bfdf5e3774	stdlib@go1.25.5	1.25.12
ghcr.io/chaos-mesh/chaos-daemon :v2.8.3	69b1d3c09cfa	stdlib@go1.25.11	1.25.12
ghcr.io/chaos-mesh/chaos-mesh :v2.8.3	bdb31f3121a2	stdlib@go1.25.11	1.25.12
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.19.1	85108987d044	stdlib@go1.26.4	1.25.12

Open the chart page →

17,099

mongodb-operatorccowley

0.1.1

1 of 1 See more

mongodb-operator ccowley 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
quay.io/mongodb/mongodb-kubernetes-operator :0.3.0	107a7c73af59	stdlib@go1.14.10	1.25.12

Open the chart page →

6,389

openldapccowley

2.0.4

1 of 3 See more

openldap ccowley 2.0.4

1 of the 3 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
osixia/openldap :1.4.0	ccd95cc6e61e	stdlib@go1.13.4	1.25.12

Open the chart page →

6,219

openldap_exporterccowley

0.1.0

1 of 1 See more

openldap_exporter ccowley 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
quay.io/chriscowley/openldap_exporter :v2.1.1	6c308e9732e1	stdlib@go1.15.7	1.25.12

Open the chart page →

2,143

kube-ceemsceems

1.40.0

1 of 5 See more

kube-ceems ceems 1.40.0

1 of the 5 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
grafana/grafana :13.2.1-distroless	3600073f45a9	stdlib@go1.26.4	1.25.12

Open the chart page →

647

cerberuscerberus

0.16.0

1 of 1 See more

cerberus cerberus 0.16.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
ghcr.io/tsouza/cerberus :1.20.0	ef384585f9a3	stdlib@go1.26.2	1.25.12

Open the chart page →

162

cert-manager-csi-driver-spiffecert-manager

0.15.0

2 of 4 See more

cert-manager-csi-driver-spiffe cert-manager 0.15.0

2 of the 4 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.17.0	f9de845b1701	stdlib@go1.26.3	1.25.12
registry.k8s.io/sig-storage/livenessprobe :v2.19.0	06da0d5b8908	stdlib@go1.26.3	1.25.12

Open the chart page →

585

cert-manager-acm-synccert-manager-acm-sync

0.7.4

1 of 1 See more

cert-manager-acm-sync cert-manager-acm-sync 0.7.4

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
ghcr.io/camilorivera/cert-manager-acm-sync :0.7.4	89a83796a550	stdlib@go1.26.4	1.25.12

Open the chart page →

132

cert-manager-alidns-webhookcert-manager-alidns-webhook

0.1.4

1 of 1 See more

cert-manager-alidns-webhook cert-manager-alidns-webhook 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
ghcr.io/crazygit/cert-manager-alidns-webhook :0.1.4	976be6506eb6	stdlib@go1.25.3	1.25.12

Open the chart page →

1,328

cert-manager-desec-webhookcert-manager-desec-webhook

1.0.1

1 of 1 See more

cert-manager-desec-webhook cert-manager-desec-webhook 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
ghcr.io/luzifer/cert-manager-desec-webhook :v1.0.1	fa1f6b2e9a6e	stdlib@go1.23.4	1.25.12

Open the chart page →

1,271

cert-manager-webhook-abioncert-manager-webhook-abion

1.3.2

1 of 1 See more

cert-manager-webhook-abion cert-manager-webhook-abion 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
abiondevelopment/cert-manager-webhook-abion :latest	c741988fbd23	stdlib@go1.25.1	1.25.12

Open the chart page →

1,094

cert-manager-webhook-bunnycert-manager-webhook-bunny

1.0.2

1 of 1 See more

cert-manager-webhook-bunny cert-manager-webhook-bunny 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
ghcr.io/o0th/cert-manager-webhook-bunny :1.0.2	fe7ce555a12d	stdlib@go1.23.5	1.25.12

Open the chart page →

839

cert-manager-webhook-civocert-manager-webhook-civo

0.0.0-05b683cb6efdc99135f68af18007954e74f18404

1 of 1 See more

cert-manager-webhook-civo cert-manager-webhook-civo 0.0.0-05b683cb6efdc99135f68af18007954e74f18404

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
okteto/civo-webhook :0.5.3	57cd51176538	stdlib@go1.21.3	1.25.12

Open the chart page →

1,278

cert-manager-webhook-hcloud-zonescert-manager-webhook-hcloud-zones

0.1.5

1 of 1 See more

cert-manager-webhook-hcloud-zones cert-manager-webhook-hcloud-zones 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
ghcr.io/xmv-solutions-gmbh/cert-manager-webhook-hcloud-zones :0.1.5	a7a846bba3e8	stdlib@go1.25.11	1.25.12

Open the chart page →

415

cert-manager-webhook-infoblox-wapicert-manager-webhook-infoblox-wapi

1.5.2

1 of 1 See more

cert-manager-webhook-infoblox-wapi cert-manager-webhook-infoblox-wapi 1.5.2

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
ghcr.io/luisico/cert-manager-webhook-infoblox-wapi :1.5	ded797477896	stdlib@go1.16.15	1.25.12

Open the chart page →

2,352

cert-manager-webhook-namecheapcert-manager-webhook-namecheap

0.1.2

1 of 1 See more

cert-manager-webhook-namecheap cert-manager-webhook-namecheap 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
ghcr.io/extrality/cert-manager-webhook-namecheap :latest	e3552fa0c68a	stdlib@go1.20.6	1.25.12

Open the chart page →

1,759

cert-manager-webhook-pdnscert-manager-webhook-pdns

3.2.5

1 of 1 See more

cert-manager-webhook-pdns cert-manager-webhook-pdns 3.2.5

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
zachomedia/cert-manager-webhook-pdns :v2.5.5	4940e227a39b	stdlib@go1.26.1	1.25.12

Open the chart page →

1,080

cert-manager-webhook-regerycert-manager-webhook-regery

1.0.0

1 of 1 See more

cert-manager-webhook-regery cert-manager-webhook-regery 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
darioackermann/cert-manager-webhook-regery :latest	0d450bc4acc4	stdlib@go1.22.10	1.25.12

Open the chart page →

889

cert-manager-webhook-solidservercert-manager-webhook-solidserver

1.0.2

1 of 1 See more

cert-manager-webhook-solidserver cert-manager-webhook-solidserver 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
ghcr.io/niklas-letz/cert-manager-webhook-solidserver :1.0.2	f19a306ce759	stdlib@go1.26.4	1.25.12

Open the chart page →

527

cert-utils-operatorcert-utils-operator

1.3.12

2 of 2 See more

cert-utils-operator cert-utils-operator 1.3.12

2 of the 2 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
quay.io/redhat-cop/cert-utils-operator :v1.3.12	0290e7b2800a	stdlib@go1.19.13	1.25.12
quay.io/redhat-cop/kube-rbac-proxy :v0.11.0	c68135620167	stdlib@go1.15.15	1.25.12

Open the chart page →

7,783

Container images carrying it

4,913 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
library/postgres :18.0	6f3e42ad37de	stdlib@go1.24.6	1.25.12	2
library/postgres :9.6	caddd35b05cd	stdlib@go1.16.7	1.25.12	2
library/postgres :16.4	e62fbf9d3e2b	stdlib@go1.18.2	1.25.12	2
library/postgres :13-alpine	fb9065b6e3e2	stdlib@go1.24.6	1.25.12	2
library/rabbitmq :4.1.0-management	935b3f84c1e4	stdlib@go1.22.2	1.25.12	2
library/redis	148bb5411c18	stdlib@go1.18.2	1.25.12	2
library/redis :7.2.3	a7cee7c8178f	stdlib@go1.18.2	1.25.12	2
library/redmine :6.1.3-trixie	f474a901faec	stdlib@go1.24.6	1.25.12	2
library/traefik :v3.7.1	6b9cbca6fac4	stdlib@go1.25.10	1.25.12	2
library/traefik :v2.5	7d5a6ae66572	stdlib@go1.17.6	1.25.12	2
library/zookeeper :3.9.5	f258365d4882	stdlib@go1.18.1	1.25.12	2
lightninglabs/lnd :v0.18.3-beta	f86bbec4dfb3	stdlib@go1.22.5	1.25.12	2
listmonk/listmonk :v2.1.0	d2eac77ddfad	stdlib@go1.17.6	1.25.12	2
listmonk/listmonk :latest :v6.2.0	f535d59e1499	stdlib@go1.26.1	1.25.12	2
louislam/uptime-kuma :2.3.2	9aeb4e51d038	stdlib@go1.20.5	1.25.12	2
louislam/uptime-kuma :2.5.0	a8610b3b4c38	stdlib@go1.20.5	1.25.12	2
mattermost/mattermost-team-edition :10.11.2	b8bd1246cb3a	stdlib@go1.24.5	1.25.12	2
maxrocketinternet/soti-mobicontrol-exporter :0.6	1a281b76efa3	stdlib@go1.14	1.25.12	2
meshery/meshery :stable-latest	44b64ee128fb	stdlib@go1.26.4	1.25.12	2
mesosphere/kubeaddons-catalog :v0.11.4	073db43d0b8b	stdlib@go1.15.2	1.25.12	2
mesosphere/kubectl :v1.35.0-alpine	ea01a9387771	stdlib@go1.25.5	1.25.12	2
minio/mc :RELEASE.2020-11-25T23-04-07Z	bf85c57cdfcc	stdlib@go1.15.5	1.25.12	2
minio/operator :v4.3.7	54393e03f3b2	stdlib@go1.17.4	1.25.12	2
moby/buildkit :v0.32.2-rootless	504731e577c2	stdlib@go1.25.7	1.25.12	2
natsio/nats-account-server :1.0.0	a3381560aab6	stdlib@go1.16.6	1.25.12	2
natsio/nats-box :0.11.0	9fbf7bf684e4	stdlib@go1.18.1	1.25.12	2
natsio/nats-server-config-reloader :0.21.1	10ff229eaf52	stdlib@go1.25.5	1.25.12	2
natsio/nats-server-config-reloader :0.7.2	911ce7ed2f55	stdlib@go1.19	1.25.12	2
natsio/nats-server-config-reloader :0.10.1	e414cc7e6f59	stdlib@go1.19.4	1.25.12	2
natsio/prometheus-nats-exporter :0.10.0	16048afb67a5	stdlib@go1.19	1.25.12	2
natsio/prometheus-nats-exporter :0.17.3	26c826662ac8	stdlib@go1.24.2	1.25.12	2
natsio/prometheus-nats-exporter :0.11.0	31c02aac089a	stdlib@go1.20.3	1.25.12	2
netapp/trident-protect-utils :v2.0.0	cd0c18d8f9ec	stdlib@go1.24.12	1.25.12	2
obolnetwork/charon :v1.10.0	278c7e2897b6	stdlib@go1.26.1	1.25.12	2
oliver006/redis_exporter :v1.9.0	4af75e9f16f6	stdlib@go1.14.4	1.25.12	2
opencloudeu/opencloud-rolling :2.1.0	f9634bb04905	stdlib@go1.24.2	1.25.12	2
opencsghq/postgres :15.19	b98600564e07	stdlib@go1.24.6	1.25.12	2
opendatacube/ows :latest	668cbb41473c	stdlib@go1.22.2	1.25.12	2
openebs/etcd :3.6.4-debian-12-r0	c86c06f1ce6a	stdlib@go1.24.5	1.25.12	2
openebs/node-disk-manager :2.1.0	f6c18b0f8c8a	stdlib@go1.19.3	1.25.12	2
openebs/node-disk-operator :2.1.0	6afe2123c457	stdlib@go1.19.3	1.25.12	2
openebs/provisioner-localpv :4.6.0	99f5116f5cb8	stdlib@go1.25.0	1.25.12	2
openebs/provisioner-localpv :3.5.0	aea39e49bb97	stdlib@go1.19.13	1.25.12	2
openkruise/kruise-helm-hook :v0.1.0	edc7cf9428fd	stdlib@go1.20.14	1.25.12	2
openpolicyagent/gatekeeper :v3.4.0-rc.1	825370bdb3c3	stdlib@go1.16.2	1.25.12	2
oryd/hydra-maester :v0.0.42	0a7a2bfd0e7d	stdlib@go1.26.3	1.25.12	2
oryd/kratos :v1.0.0	d06fc5845f63	stdlib@go1.20.5	1.25.12	2
oryd/kratos :v1.3.1	fe2428f103a6	stdlib@go1.23.2	1.25.12	2
oryd/oathkeeper :v0.40.6	e8cb9b79a89c	stdlib@go1.20.5	1.25.12	2
osixia/openldap :1.4.0	ccd95cc6e61e	stdlib@go1.13.4	1.25.12	2