StackRadar

CVE-2026-39822

Unscored

Advisory

Published 7 Jul 2026In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.002
14th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
4,207
of 17,790 indexed, latest versions
Container images
4,890
deployed by those charts
Fix available
1 of 1
affected package

Root escape via symlink plus trailing slash in os

Carried by container images the latest versions of 4,207 of 17,790 indexed charts deploy, on 4,890 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+186 more1.25.124,890
OSV records
GO-2026-4970
Also known as
BIT-golang-2026-39822

Charts affected

4,207 by stars
ChartLatestAffected imagesRadar Score
inbox-server-distributedappscodeVerified publisher2025.12.251 of 4See more

inbox-server-distributed appscode 2025.12.25

1 of the 4 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
library/cassandra:4.1.37cbcec0086ac
stdlib@go1.18.2
1.25.12

Open the chart page →

15,707
james-komposeappscodeVerified publisher0.1.01 of 4See more

james-kompose appscode 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
library/cassandra:4.1.37cbcec0086ac
stdlib@go1.18.2
1.25.12

Open the chart page →

17,110
kube-auth-managerappscodeVerified publisher2023.11.141 of 1See more

kube-auth-manager appscode 2023.11.14

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/appscode/kube-auth-manager:v0.0.1789692ab9193
stdlib@go1.20.2
1.25.12

Open the chart page →

1,945
kube-auth-proxyappscodeVerified publisher2023.11.141 of 1See more

kube-auth-proxy appscode 2023.11.14

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/appscode/kube-auth-manager:v0.0.1789692ab9193
stdlib@go1.20.2
1.25.12

Open the chart page →

1,945
kubedb-certifiedappscodeVerified publisher2026.7.103 of 8See more

kubedb-certified appscode 2026.7.10

3 of the 8 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/appscode/kubectl-nonroot:1.340b26892cec94
stdlib@go1.24.13
1.25.12
ghcr.io/appscode/petset:v0.1.093fa0daf603c
stdlib@go1.25.10
1.25.12
ghcr.io/appscode/sidekick:v0.0.15d1036b07e348
stdlib@go1.25.11
1.25.12

Open the chart page →

4,048
kubedb-communityappscodeVerified publisher0.24.21 of 2See more

kubedb-community appscode 0.24.2

1 of the 2 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
kubedb/operator:v0.24.01a06ff0bda52
stdlib@go1.17.6
1.25.12

Open the chart page →

2,550
kubedb-enterpriseappscodeVerified publisher0.11.21 of 2See more

kubedb-enterprise appscode 0.11.2

1 of the 2 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
kubedb/kubedb-enterprise:v0.11.05829bcedcb0d
stdlib@go1.17.3
1.25.12

Open the chart page →

2,575
kubedb-migratorappscodeVerified publisher0.5.01 of 1See more

kubedb-migrator appscode 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/kubedb/migrator-operator:v0.5.098ffb48f5b60
stdlib@go1.25.11
1.25.12

Open the chart page →

283
kubedb-oneappscodeVerified publisher2023.12.289 of 10See more

kubedb-one appscode 2023.12.28

9 of the 10 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
prom/pushgateway:v1.4.2a684e7c830a4
stdlib@go1.16.9
1.25.12
ghcr.io/kubedb/kubedb-autoscaler:v0.25.0df6b11907d33
stdlib@go1.21.5
1.25.12
ghcr.io/kubedb/kubedb-dashboard:v0.16.07bfe1c07bd9b
stdlib@go1.20.7
1.25.12
ghcr.io/kubedb/kubedb-ops-manager:v0.27.1ec36422b09af
stdlib@go1.20.14
1.25.12
ghcr.io/kubedb/kubedb-provisioner:v0.40.242574f512837
stdlib@go1.20.14
1.25.12
ghcr.io/kubedb/kubedb-schema-manager:v0.16.09518de37eed5
stdlib@go1.20.7
1.25.12
ghcr.io/kubedb/kubedb-webhook-server:v0.16.2e24894e32cbc
stdlib@go1.20.14
1.25.12
ghcr.io/stashed/stash-crd-installer:v0.32.0c6f2a844b5dd
stdlib@go1.20.8
1.25.12
ghcr.io/stashed/stash-enterprise:v0.32.0e9bde36e34b7
stdlib@go1.20.7
1.25.12

Open the chart page →

15,016
kubedb-provider-awsappscodeVerified publisher2026.7.101 of 1See more

kubedb-provider-aws appscode 2026.7.10

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/kubedb/provider-aws:v0.27.049b1c312e342
stdlib@go1.20.7
1.25.12

Open the chart page →

2,527
kubedb-provider-azureappscodeVerified publisher2026.7.101 of 1See more

kubedb-provider-azure appscode 2026.7.10

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/kubedb/provider-azure:v0.27.0aa0c8526ae5e
stdlib@go1.19.3
1.25.12

Open the chart page →

2,705
kubedb-provider-gcpappscodeVerified publisher2026.7.102 of 2See more

kubedb-provider-gcp appscode 2026.7.10

2 of the 2 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/appscode/kubectl-nonroot:1.340b26892cec94
stdlib@go1.24.13
1.25.12
ghcr.io/kubedb/provider-gcp:v0.27.0a1d4cf8b8fe1
stdlib@go1.19.1
1.25.12

Open the chart page →

3,033
kubedb-ui-serverappscodeVerified publisher2021.12.211 of 1See more

kubedb-ui-server appscode 2021.12.21

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
kubedb/kubedb-ui-server:v0.0.1_linux_amd647d27865514ee
stdlib@go1.17.8
1.25.12

Open the chart page →

2,047
kubeform-provider-awsappscodeVerified publisher2023.11.11 of 1See more

kubeform-provider-aws appscode 2023.11.1

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/kubeform/provider-aws:v0.0.1e3d1f1302e49
stdlib@go1.19.1
1.25.12

Open the chart page →

2,796
kubeform-provider-azureappscodeVerified publisher2023.11.11 of 1See more

kubeform-provider-azure appscode 2023.11.1

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/kubeform/provider-azure:v0.0.1ac8459f70f85
stdlib@go1.20.5
1.25.12

Open the chart page →

2,716
kubeform-provider-gcpappscodeVerified publisher2023.11.11 of 1See more

kubeform-provider-gcp appscode 2023.11.1

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/kubeform/provider-gcp:v0.0.1af77073c184f
stdlib@go1.19.9
1.25.12

Open the chart page →

2,743
kubestashappscodeVerified publisher2026.7.102 of 2See more

kubestash appscode 2026.7.10

2 of the 2 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/appscode/kubectl-nonroot:1.340b26892cec94
stdlib@go1.24.13
1.25.12
ghcr.io/kubestash/kubestash:v0.29.043e01ed32486
stdlib@go1.25.5
1.25.12

Open the chart page →

1,091
kubestash-certifiedappscodeVerified publisher2026.7.102 of 2See more

kubestash-certified appscode 2026.7.10

2 of the 2 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/appscode/kubectl-nonroot:1.340b26892cec94
stdlib@go1.24.13
1.25.12
ghcr.io/kubestash/kubestash:v0.29.043e01ed32486
stdlib@go1.25.5
1.25.12

Open the chart page →

1,091
kubestash-operatorappscodeVerified publisher0.29.02 of 2See more

kubestash-operator appscode 0.29.0

2 of the 2 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/appscode/kubectl-nonroot:1.340b26892cec94
stdlib@go1.24.13
1.25.12
ghcr.io/kubestash/kubestash:v0.29.043e01ed32486
stdlib@go1.25.5
1.25.12

Open the chart page →

1,091
kubevaultappscodeVerified publisher2026.8.71 of 2See more

kubevault appscode 2026.8.7

1 of the 2 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/appscode/kubectl-nonroot:1.340b26892cec94
stdlib@go1.24.13
1.25.12

Open the chart page →

789
kubevault-certifiedappscodeVerified publisher2026.2.271 of 1See more

kubevault-certified appscode 2026.2.27

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/kubevault/vault-operator:v0.24.00087cb49616f
stdlib@go1.25.9
1.25.12

Open the chart page →

1,112
kubevault-webhook-serverappscodeVerified publisher0.25.01 of 2See more

kubevault-webhook-server appscode 0.25.0

1 of the 2 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/appscode/kubectl-nonroot:1.340b26892cec94
stdlib@go1.24.13
1.25.12

Open the chart page →

789
kubevirt-infra-csi-driverappscodeVerified publisher0.1.02 of 6See more

kubevirt-infra-csi-driver appscode 0.1.0

2 of the 6 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
quay.io/kubevirt/kubevirt-csi-driver:latest7b31b21b3f1e
stdlib@go1.24.13
1.25.12
registry.k8s.io/sig-storage/csi-resizer:v1.13.12a0b297cc7c4
stdlib@go1.23.1
1.25.12

Open the chart page →

1,177
kubevirt-tenant-csi-driverappscodeVerified publisher0.1.02 of 4See more

kubevirt-tenant-csi-driver appscode 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
quay.io/kubevirt/kubevirt-csi-driver:latest7b31b21b3f1e
stdlib@go1.24.13
1.25.12
registry.k8s.io/sig-storage/snapshot-controller:v6.3.1ce6ca3c0e30b
stdlib@go1.20.5
1.25.12

Open the chart page →

1,278
license-proxyserverappscodeVerified publisher2026.2.161 of 1See more

license-proxyserver appscode 2026.2.16

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/appscode/license-proxyserver:v0.1.1e192ad567e0b
stdlib@go1.25.7
1.25.12

Open the chart page →

1,106
license-proxyserver-addon-managerappscodeVerified publisher2024.2.251 of 1See more

license-proxyserver-addon-manager appscode 2024.2.25

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/appscode/license-proxyserver:v0.0.8d6c2532ea386
stdlib@go1.22.1
1.25.12

Open the chart page →

1,384
license-proxyserver-managerappscodeVerified publisher2026.2.161 of 1See more

license-proxyserver-manager appscode 2026.2.16

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/appscode/license-proxyserver:v0.1.1e192ad567e0b
stdlib@go1.25.7
1.25.12

Open the chart page →

1,106
managed-serviceaccountappscodeVerified publisher2024.2.251 of 1See more

managed-serviceaccount appscode 2024.2.25

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/kluster-manager/managed-serviceaccount:latest365183f83ac9
stdlib@go1.22.0
1.25.12

Open the chart page →

2,404
managed-serviceaccount-managerappscodeVerified publisher2026.2.161 of 1See more

managed-serviceaccount-manager appscode 2026.2.16

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/kluster-manager/managed-serviceaccount:v0.10.0fc256885915b
stdlib@go1.25.8
1.25.12

Open the chart page →

912
marketplace-apiappscodeVerified publisher2026.9.111 of 1See more

marketplace-api appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
stdlib@go1.25.3
1.25.12

Open the chart page →

2,605
minioappscodeVerified publisher2026.9.111 of 1See more

minio appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2023-01-12T02-06-16Zfc6bedc99355
stdlib@go1.19.4
1.25.12

Open the chart page →

4,043
multicluster-controlplaneappscodeVerified publisher2025.4.301 of 1See more

multicluster-controlplane appscode 2025.4.30

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/kluster-manager/multicluster-controlplane:latest6de40f528be9
stdlib@go1.21.8
1.25.12

Open the chart page →

2,568
multicluster-ingress-readerappscodeVerified publisher2024.7.101 of 1See more

multicluster-ingress-reader appscode 2024.7.10

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/appscode/kubectl-nonroot:1.340b26892cec94
stdlib@go1.24.13
1.25.12

Open the chart page →

302
offline-license-serverappscodeVerified publisher2026.9.111 of 2See more

offline-license-server appscode 2026.9.11

1 of the 2 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/appscode/offline-license-server:v0.0.76e4b66308d8f6
stdlib@go1.25.5
1.25.12

Open the chart page →

1,682
opentelemetry-kube-stackappscodeVerified publisher0.14.123 of 3See more

opentelemetry-kube-stack appscode 0.14.12

3 of the 3 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
rancher/kubectl:v1.34.1090bef429ed1
stdlib@go1.24.6
1.25.12
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.144.079b81912f1fb
stdlib@go1.25.6
1.25.12
quay.io/brancz/kube-rbac-proxy:v0.20.0147cb28fea35
stdlib@go1.25.1
1.25.12

Open the chart page →

1,872
operator-shard-managerappscodeVerified publisher2026.6.221 of 1See more

operator-shard-manager appscode 2026.6.22

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/appscode/operator-shard-manager:v0.0.64a16c6ccecb8
stdlib@go1.25.11
1.25.12

Open the chart page →

411
panopticonappscodeVerified publisher2026.6.222 of 2See more

panopticon appscode 2026.6.22

2 of the 2 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/appscode/kubectl-nonroot:1.340b26892cec94
stdlib@go1.24.13
1.25.12
ghcr.io/appscode/panopticon:v0.0.23a645b40d2d3b
stdlib@go1.25.11
1.25.12

Open the chart page →

468
persesappscodeVerified publisher2026.6.21 of 1See more

perses appscode 2026.6.2

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/opnpulse/perses:v2026.4.24b880da90aa1a
stdlib@go1.25.11
1.25.12

Open the chart page →

530
petsetappscodeVerified publisher2026.5.221 of 1See more

petset appscode 2026.5.22

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/appscode/petset:v0.1.093fa0daf603c
stdlib@go1.25.10
1.25.12

Open the chart page →

854
platform-apiappscodeVerified publisher2026.9.112 of 3See more

platform-api appscode 2026.9.11

2 of the 3 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
stdlib@go1.25.3
1.25.12
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
stdlib@go1.25.4
1.25.12

Open the chart page →

37,184
platform-linksappscodeVerified publisher2026.9.111 of 1See more

platform-links appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/appscode/fileserver:v0.0.2b1857871e06c
stdlib@go1.25.4
1.25.12

Open the chart page →

771
prom-label-proxyappscodeVerified publisher2026.7.151 of 1See more

prom-label-proxy appscode 2026.7.15

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/opnpulse/prom-label-proxy:v2026.4.2461344c13f17d
stdlib@go1.25.10
1.25.12

Open the chart page →

179
regcacheappscodeVerified publisher2026.9.111 of 1See more

regcache appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
library/registry:3.1.11be55279f18a
stdlib@go1.25.9
1.25.12

Open the chart page →

634
secrets-store-csi-driver-provider-virtual-secretsappscodeVerified publisher2026.8.141 of 1See more

secrets-store-csi-driver-provider-virtual-secrets appscode 2026.8.14

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/appscode/secrets-store-csi-driver-provider-virtual-secrets:v0.2.07afb394f9f97
stdlib@go1.24.1
1.25.12

Open the chart page →

547
service-backendappscodeVerified publisher2026.9.111 of 1See more

service-backend appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/appscode/service-provider:v0.0.2f6e481386d70
stdlib@go1.25.5
1.25.12

Open the chart page →

1,330
service-gatewayappscodeVerified publisher2026.9.112 of 3See more

service-gateway appscode 2026.9.11

2 of the 3 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/voyagermesh/echoserver:v20221109fa56a9251de6
stdlib@go1.19
1.25.12
ghcr.io/voyagermesh/gateway:v1.8.24237fd16a3cb
stdlib@go1.26.4
1.25.12

Open the chart page →

2,088
service-presetsappscodeVerified publisher2024.2.111 of 1See more

service-presets appscode 2024.2.11

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/voyagermesh/echoserver:v20221109-7ee2f3efa56a9251de6
stdlib@go1.19
1.25.12

Open the chart page →

823
service-providerappscodeVerified publisher2026.9.112 of 2See more

service-provider appscode 2026.9.11

2 of the 2 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/appscode/kube-rbac-proxy:v0.18.27de54b6dedc8
stdlib@go1.23.3
1.25.12
ghcr.io/appscode/service-provider:v0.0.2f6e481386d70
stdlib@go1.25.5
1.25.12

Open the chart page →

2,224
stash-communityappscodeVerified publisher0.42.04 of 4See more

stash-community appscode 0.42.0

4 of the 4 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
prom/pushgateway:v1.4.2a684e7c830a4
stdlib@go1.16.9
1.25.12
ghcr.io/appscode/kubectl-nonroot:1.3183d43cc41590
stdlib@go1.24.9
1.25.12
ghcr.io/stashed/stash:v0.42.03a98245a7667
stdlib@go1.25.3
1.25.12
ghcr.io/stashed/stash-crd-installer:v0.42.076f0a650e44b
stdlib@go1.25.3
1.25.12

Open the chart page →

3,661
stash-opscenterappscodeVerified publisher2025.10.171 of 1See more

stash-opscenter appscode 2025.10.17

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/stashed/stash-ui-server:v0.23.047cffbc65700
stdlib@go1.25.3
1.25.12

Open the chart page →

672

Container images carrying it

4,890 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
stdlib@go1.23.2
1.25.12
2
outlinewiki/outline:0.69.1d060dcd8f9aa
stdlib@go1.19.4
1.25.12
2
passbolt/passbolt:3.4.0-ce-non-root655547e17263
stdlib@go1.14.4
1.25.12
2
percona/everest-helmtools:0.0.1904458d04a18
stdlib@go1.24.6
1.25.12
2
pgautoupgrade/pgautoupgrade:18-alpine48b448825656
stdlib@go1.24.6
1.25.12
2
pgvector/pgvector:0.8.5-pg18-trixie9d2e61c7352b
stdlib@go1.24.6
1.25.12
2
pgvector/pgvector:0.8.6-pg16-bookworm:pg16ccc6e83d6e35
stdlib@go1.24.6
1.25.12
2
phntom/kochi:1.1.33b82358bd56e
stdlib@go1.15.5
1.25.12
2
place1/wg-access-server:v0.4.62b2f3ea80ed6
stdlib@go1.13.8
1.25.12
2
polyaxon/polyaxon-operator:2.16.42716f552b301
stdlib@go1.24.13
1.25.12
2
postgis/postgis:15-3.3a2fc46b52819
stdlib@go1.18.2
1.25.12
2
pottava/s3-proxy:2.020a0bcb15f76
stdlib@go1.13.7
1.25.12
2
prom/blackbox-exporter:v0.18.01ffc3f109eb3
stdlib@go1.15.2
1.25.12
2
prom/prometheus:v2.17.242d2395cd719
stdlib@go1.13.10
1.25.12
2
prom/prometheus:v2.52.05c435642ca4d
stdlib@go1.22.3
1.25.12
2
prom/prometheus:v2.37.98176adea328e
stdlib@go1.19.11
1.25.12
2
prom/prometheus:v2.48.1a67e5e402ff5
stdlib@go1.21.5
1.25.12
2
prom/prometheus:v2.21.0d43417c260e5
stdlib@go1.15.2
1.25.12
2
prom/pushgateway:v1.0.1a5df60347882
stdlib@go1.13.5
1.25.12
2
prom/pushgateway:v1.3.0c0d39b8d4cfe
stdlib@go1.15.2
1.25.12
2
qingcloud/cloud-controller-manager:v1.4.1210f66b5df886
stdlib@go1.18.2
1.25.12
2
qingcloud/hostnic-plus:v1.0.34cd5366a9f51
stdlib@go1.16.3
1.25.12
2
qmcgaw/ddns-updater:2.10.0:v2.10.03e2aa558946b
stdlib@go1.26.2
1.25.12
2
rajnandan1/kener:3.2.1930407afca731
stdlib@go1.20.7
1.25.12
2
rancher/k3s:v1.26.0-k3s19380f5dbae9a
stdlib@go1.19.4
1.25.12
2
rancher/kine:v0.11.412889bbcd1e8
stdlib@go1.21.5
1.25.12
2
rancher/kubectl:v1.36.206c7a7a97727
stdlib@go1.26.4
1.25.12
2
rancher/local-path-provisioner:v0.0.3534ff0847cc47
stdlib@go1.26.1
1.25.12
2
rancher/local-path-provisioner:v0.0.299bebefa0b908
stdlib@go1.22.5
1.25.12
2
rclone/rclone:1.6874c51b8817e5
stdlib@go1.23.3
1.25.12
2
ribbybibby/ssl-exporter:2.4.2718abe7f5e79
stdlib@go1.18.3
1.25.12
2
rookout/controller:latest4451a6f6b8ec
stdlib@go1.20.5
1.25.12
2
rookout/data-on-prem:latest51c0fce64467
stdlib@go1.20.5
1.25.12
2
rss3/op-batcher:a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8adae8a5bdd7a6
stdlib@go1.21.3
1.25.12
2
rss3/op-proposer:a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8aa4059dd32c48
stdlib@go1.21.3
1.25.12
2
samcm/ethereum-metrics-exporter:0.29.2:latest91a2d9a015c1
stdlib@go1.25.8
1.25.12
2
scaleway/cert-manager-webhook-scaleway:v0.0.1dcc14608d000
stdlib@go1.15.2
1.25.12
2
shlinkio/shlink:5.1.6:stable666cc24edf72
stdlib@go1.26.4
1.25.12
2
sikalabs/hello-world-server:latest5f49bf889a64
stdlib@go1.26.2
1.25.12
2
squareup/ghostunnel:v1.5.270f4cf270425
stdlib@go1.13.4
1.25.12
2
starrocks/operator:v1.11.78c20435a7579
stdlib@go1.22.12
1.25.12
2
statping/statping:v0.90.74e874da513a5c
stdlib@go1.14.13
1.25.12
2
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
stdlib@go1.20.4
1.25.12
2
syncthing/syncthing:2.1.1775c4aac4862
stdlib@go1.26.3
1.25.12
2
taigaio/taiga-back:latest4beed8f62c9f
stdlib@go1.24.4
1.25.12
2
taigaio/taiga-protected:latestfd4568a97a59
stdlib@go1.24.4
1.25.12
2
temporalio/server:1.22.4c0a44c26397b
stdlib@go1.20.11
1.25.12
2
temporalio/ui:2.16.2af9c9349708f
stdlib@go1.20.5
1.25.12
2
thanosio/thanos:v0.41.0cf3e9b292e43
stdlib@go1.25.7
1.25.12
2
thesisrobot/loop:v0.11.1-beta89ae07e787ca
stdlib@go1.13.12
1.25.12
2

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.