CVE-2026-39822

Unscored

Advisory

Published 7 Jul 2026In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.002; 14th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 4,226; of 17,790 indexed, latest versions
Container images: 4,913; deployed by those charts
Fix available: 1 of 1; affected package

Root escape via symlink plus trailing slash in os

Carried by container images the latest versions of 4,226 of 17,790 indexed charts deploy, on 4,913 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+186 more	1.25.12	4,913

OSV records: GO-2026-4970
Also known as: BIT-golang-2026-39822

Charts affected

4,226 by stars

Chart

Latest

Affected images

Radar Score

stable-hacalltelemetry

0.11.4

3 of 7 See more

stable-ha calltelemetry 0.11.4

3 of the 7 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
library/nats :2.10.12-alpine	bca70839d953	stdlib@go1.21.8	1.25.12
natsio/nats-box :0.14.2	e808e0644ce1	stdlib@go1.21.5	1.25.12
natsio/nats-server-config-reloader :0.14.1	0d50270fa374	stdlib@go1.20.5	1.25.12

Open the chart page →

4,705

pagescamden-pages

1.0.0

1 of 3 See more

pages camden-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.12

Open the chart page →

20,242

camellia-redis-proxycamellia-redis-proxy

1.4.0

1 of 2 See more

camellia-redis-proxy camellia-redis-proxy 1.4.0

1 of the 2 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
library/redis :5.0	fc5ecd863862	stdlib@go1.16.7	1.25.12

Open the chart page →

8,024

geoservercamptocamp2

0.0.3

1 of 12 See more

geoserver camptocamp2 0.0.3

1 of the 12 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
library/postgres :12	2f2a8c2a7d10	stdlib@go1.18.2	1.25.12

Open the chart page →

88,618

bucket-clonercamptocamp3

1.0.4

1 of 1 See more

bucket-cloner camptocamp3 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
camptocamp/bucket-cloner :latest	acfafc308d88	stdlib@go1.16.5	1.25.12

Open the chart page →

4,525

getconfigcamptocamp3

0.1.1

1 of 1 See more

getconfig camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
quay.io/oauth2-proxy/oauth2-proxy :v7.3.0	8c21390be87d	stdlib@go1.17.10	1.25.12

Open the chart page →

2,201

prometheus-puppetdb-sdcamptocamp3

8.0.2

1 of 2 See more

prometheus-puppetdb-sd camptocamp3 8.0.2

1 of the 2 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
ghcr.io/camptocamp/prometheus-puppetdb-sd :0.14.0	414c0c99fd06	stdlib@go1.23.5	1.25.12

Open the chart page →

6,153

redisoperatorcamptocamp3

3.0.1

1 of 1 See more

redisoperator camptocamp3 3.0.1

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
quay.io/spotahome/redis-operator :latest	8c772955184e	stdlib@go1.20.7	1.25.12

Open the chart page →

1,193

s3-exportercamptocamp3

2.2.0

1 of 1 See more

s3-exporter camptocamp3 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
ribbybibby/s3-exporter :v0.5.0	998184c51a00	stdlib@go1.15.15	1.25.12

Open the chart page →

1,183

snyk-exportercamptocamp3

0.1.4

1 of 1 See more

snyk-exporter camptocamp3 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
quay.io/lunarway/snyk_exporter :v1.11.1	55e5cc5aaa0a	stdlib@go1.17.7	1.25.12

Open the chart page →

1,079

ssl-exportercamptocamp3

0.1.0

1 of 1 See more

ssl-exporter camptocamp3 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
ribbybibby/ssl-exporter :2.4.2	718abe7f5e79	stdlib@go1.18.3	1.25.12

Open the chart page →

1,632

terraboardcamptocamp3

2.4.0

1 of 1 See more

terraboard camptocamp3 2.4.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
ghcr.io/camptocamp/terraboard :v2.3.0	df53e2c8998c	stdlib@go1.21.3	1.25.12

Open the chart page →

1,336

apachecamptocamp-apache

0.4.0

1 of 2 See more

apache camptocamp-apache 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
quay.io/lusitaniae/apache-exporter :latest	438b1b6177eb	stdlib@go1.25.11	1.25.12

Open the chart page →

1,490

caninecanine

0.1.10

6 of 7 See more

canine canine 0.1.10

6 of the 7 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
library/traefik :v3.7.1	6b9cbca6fac4	stdlib@go1.25.10	1.25.12
ghcr.io/caninehq/canine :latest	a058034ca006	stdlib@go1.22.7	1.25.12
quay.io/jetstack/cert-manager-cainjector :v1.15.3	e0ce8ae280c8	stdlib@go1.22.5	1.25.12
quay.io/jetstack/cert-manager-controller :v1.15.3	eee34b3de2dd	stdlib@go1.22.5	1.25.12
quay.io/jetstack/cert-manager-startupapicheck :v1.15.3	4cbc1b022a23	stdlib@go1.22.5	1.25.12
quay.io/jetstack/cert-manager-webhook :v1.15.3	fdcb9ac4963f	stdlib@go1.22.5	1.25.12

Open the chart page →

14,179

cert-managercanine

1.15.3

4 of 4 See more

cert-manager canine 1.15.3

4 of the 4 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-cainjector :v1.15.3	e0ce8ae280c8	stdlib@go1.22.5	1.25.12
quay.io/jetstack/cert-manager-controller :v1.15.3	eee34b3de2dd	stdlib@go1.22.5	1.25.12
quay.io/jetstack/cert-manager-startupapicheck :v1.15.3	4cbc1b022a23	stdlib@go1.22.5	1.25.12
quay.io/jetstack/cert-manager-webhook :v1.15.3	fdcb9ac4963f	stdlib@go1.22.5	1.25.12

Open the chart page →

2,894

traefikcanine

40.2.0

1 of 1 See more

traefik canine 40.2.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
library/traefik :v3.7.1	6b9cbca6fac4	stdlib@go1.25.10	1.25.12

Open the chart page →

1,028

capi2argo-cluster-operatorcapi2argo

1.5.0

1 of 1 See more

capi2argo-cluster-operator capi2argo 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
ghcr.io/dntosas/capi2argo-cluster-operator :v1.5.0	fb8c6457ef6e	stdlib@go1.25.6	1.25.12

Open the chart page →

281

capsule-argo-addoncapsule-argo-addon

0.7.5

2 of 2 See more

capsule-argo-addon capsule-argo-addon 0.7.5

2 of the 2 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
clastix/kubectl :v1.31	22918a06c253	stdlib@go1.22.5	1.25.12
ghcr.io/peak-scale/capsule-argo-addon :0.7.5	087a80163971	stdlib@go1.24.13	1.25.12

Open the chart page →

2,046

freebox-exportercaptnbp

1.0.0

1 of 1 See more

freebox-exporter captnbp 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
captnbp/freebox-exporter :1.0.0-r0	1600c5a253e0	stdlib@go1.21.3	1.25.12

Open the chart page →

717

ranchercarbide-charts

2.15.1

1 of 2 See more

rancher carbide-charts 2.15.1

1 of the 2 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
rancher/rancher :v2.15.1	5f6c4dc52a05	stdlib@go1.26.4	1.25.12

Open the chart page →

1,487

stigatroncarbide-charts

0.4.1

3 of 10 See more

stigatron carbide-charts 0.4.1

3 of the 10 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
library/nats :2.10.5-alpine	85319e5e541b	stdlib@go1.21.4	1.25.12
natsio/nats-box :0.14.1	a67913df95f1	stdlib@go1.21.3	1.25.12
natsio/nats-server-config-reloader :0.13.0	b3359eeb10bf	stdlib@go1.20.5	1.25.12

Open the chart page →

4,423

pagescarina-pages

1.0.0

1 of 3 See more

pages carina-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.12

Open the chart page →

20,242

pagescarmel-pages-dell

1.0.0

1 of 3 See more

pages carmel-pages-dell 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.12

Open the chart page →

20,242

casdoor-helm-chartscasdoor

4.4.0

1 of 1 See more

casdoor-helm-charts casdoor 4.4.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
casbin/casdoor :4.4.0	8511c0757ac3	stdlib@go1.25.8	1.25.12

Open the chart page →

1,110

cassandra-webcassandra-web

0.1.0

1 of 1 See more

cassandra-web cassandra-web 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
ipushc/cassandra-web :latest	fa3e0c66c289	stdlib@go1.20.2	1.25.12

Open the chart page →

1,301

castai-evictorcastai

0.35.145

1 of 3 See more

castai-evictor castai 0.35.145

1 of the 3 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
registry.k8s.io/kubectl :v1.35.6	4d8c68e8c2bf	stdlib@go1.25.11	1.25.12

Open the chart page →

144

castai-tetragoncastai

0.6.1

2 of 4 See more

castai-tetragon castai 0.6.1

2 of the 4 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
quay.io/cilium/tetragon-ci :b6f3056a3f6cf05e366a3e07348f7c0b6265a60f	5efd991d218b	stdlib@go1.19.2	1.25.12
quay.io/cilium/tetragon-operator :v0.8.3	4ab8e6604204	stdlib@go1.18.3	1.25.12

Open the chart page →

4,143

castware-componentscastai

0.4.0

1 of 1 See more

castware-components castai 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
lachlanevenson/k8s-kubectl :v1.25.4	af5cea3f2e40	stdlib@go1.19.3	1.25.12

Open the chart page →

3,451

oci-csi-drivercastai

1.13.8

6 of 7 See more

oci-csi-driver castai 1.13.8

6 of the 7 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-attacher :v4.12.0	b9dc9a714a48	stdlib@go1.26.3	1.25.12
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.17.0	f9de845b1701	stdlib@go1.26.3	1.25.12
registry.k8s.io/sig-storage/csi-provisioner :v6.3.0	a4b0b1a37605	stdlib@go1.26.3	1.25.12
registry.k8s.io/sig-storage/csi-resizer :v2.2.0	a2d40c1c3ccb	stdlib@go1.26.3	1.25.12
registry.k8s.io/sig-storage/csi-snapshotter :v8.6.0	42af0929bcd6	stdlib@go1.26.3	1.25.12
registry.k8s.io/sig-storage/snapshot-controller :v8.6.0	81e79f205083	stdlib@go1.26.3	1.25.12

Open the chart page →

1,739

temporalcastai

0.54.2

10 of 14 See more

temporal castai 0.54.2

10 of the 14 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
grafana/grafana :11.0.0	0dc5a246ab16	stdlib@go1.21.10	1.25.12
temporalio/admin-tools :1.26.2	37e2e33dbd7b	stdlib@go1.22.5	1.25.12
temporalio/server :1.26.2	1e2626efcbc1	stdlib@go1.23.2	1.25.12
temporalio/ui :2.33.0	5c586a3c8ec5	stdlib@go1.23.0	1.25.12
quay.io/prometheus-operator/prometheus-config-reloader :v0.74.0	d55631c7a740	stdlib@go1.22.3	1.25.12
quay.io/prometheus/alertmanager :v0.27.0	e13b6ed5cb92	stdlib@go1.21.7	1.25.12
quay.io/prometheus/node-exporter :v1.8.1	fa7fa12a57ef	stdlib@go1.22.3	1.25.12
quay.io/prometheus/prometheus :v2.53.0	075b1ba2c4eb	stdlib@go1.22.4	1.25.12
quay.io/prometheus/pushgateway :v1.8.0	c159e946abf4	stdlib@go1.22.1	1.25.12
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.12.0	b401fae262a5	stdlib@go1.21.8	1.25.12

Open the chart page →

16,232

catalyst-agentscatalyst-agents

0.1.31

11 of 18 See more

catalyst-agents catalyst-agents 0.1.31

11 of the 18 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
alpine/k8s :1.32.3	eec354133193	stdlib@go1.23.6	1.25.12
grafana/grafana :13.1.3	ab5cb380e3ff	stdlib@go1.26.3	1.25.12
grafana/loki :3.0.0	757b5fadf816	stdlib@go1.21.9	1.25.12
grafana/loki-canary :3.0.0	28d7c00588aa	stdlib@go1.21.9	1.25.12
grafana/tempo :2.5.0	f0200a9bff6d	stdlib@go1.21.3	1.25.12
otel/opentelemetry-collector-contrib :0.156.0	125bdbeb7590	stdlib@go1.26.4	1.25.12
prom/memcached-exporter :v0.14.2	d8a61419b841	stdlib@go1.21.5	1.25.12
ghcr.io/chaos-mesh/chaos-coredns :v0.2.8	38bfdf5e3774	stdlib@go1.25.5	1.25.12
ghcr.io/chaos-mesh/chaos-daemon :v2.8.3	69b1d3c09cfa	stdlib@go1.25.11	1.25.12
ghcr.io/chaos-mesh/chaos-mesh :v2.8.3	bdb31f3121a2	stdlib@go1.25.11	1.25.12
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.19.1	85108987d044	stdlib@go1.26.4	1.25.12

Open the chart page →

17,099

mongodb-operatorccowley

0.1.1

1 of 1 See more

mongodb-operator ccowley 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
quay.io/mongodb/mongodb-kubernetes-operator :0.3.0	107a7c73af59	stdlib@go1.14.10	1.25.12

Open the chart page →

6,389

openldapccowley

2.0.4

1 of 3 See more

openldap ccowley 2.0.4

1 of the 3 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
osixia/openldap :1.4.0	ccd95cc6e61e	stdlib@go1.13.4	1.25.12

Open the chart page →

6,219

openldap_exporterccowley

0.1.0

1 of 1 See more

openldap_exporter ccowley 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
quay.io/chriscowley/openldap_exporter :v2.1.1	6c308e9732e1	stdlib@go1.15.7	1.25.12

Open the chart page →

2,143

kube-ceemsceems

1.40.0

1 of 5 See more

kube-ceems ceems 1.40.0

1 of the 5 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
grafana/grafana :13.2.1-distroless	3600073f45a9	stdlib@go1.26.4	1.25.12

Open the chart page →

647

cerberuscerberus

0.16.0

1 of 1 See more

cerberus cerberus 0.16.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
ghcr.io/tsouza/cerberus :1.20.0	ef384585f9a3	stdlib@go1.26.2	1.25.12

Open the chart page →

162

cert-manager-csi-driver-spiffecert-manager

0.15.0

2 of 4 See more

cert-manager-csi-driver-spiffe cert-manager 0.15.0

2 of the 4 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.17.0	f9de845b1701	stdlib@go1.26.3	1.25.12
registry.k8s.io/sig-storage/livenessprobe :v2.19.0	06da0d5b8908	stdlib@go1.26.3	1.25.12

Open the chart page →

585

cert-manager-acm-synccert-manager-acm-sync

0.7.4

1 of 1 See more

cert-manager-acm-sync cert-manager-acm-sync 0.7.4

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
ghcr.io/camilorivera/cert-manager-acm-sync :0.7.4	89a83796a550	stdlib@go1.26.4	1.25.12

Open the chart page →

132

cert-manager-alidns-webhookcert-manager-alidns-webhook

0.1.4

1 of 1 See more

cert-manager-alidns-webhook cert-manager-alidns-webhook 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
ghcr.io/crazygit/cert-manager-alidns-webhook :0.1.4	976be6506eb6	stdlib@go1.25.3	1.25.12

Open the chart page →

1,328

cert-manager-desec-webhookcert-manager-desec-webhook

1.0.1

1 of 1 See more

cert-manager-desec-webhook cert-manager-desec-webhook 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
ghcr.io/luzifer/cert-manager-desec-webhook :v1.0.1	fa1f6b2e9a6e	stdlib@go1.23.4	1.25.12

Open the chart page →

1,271

cert-manager-webhook-abioncert-manager-webhook-abion

1.3.2

1 of 1 See more

cert-manager-webhook-abion cert-manager-webhook-abion 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
abiondevelopment/cert-manager-webhook-abion :latest	c741988fbd23	stdlib@go1.25.1	1.25.12

Open the chart page →

1,094

cert-manager-webhook-bunnycert-manager-webhook-bunny

1.0.2

1 of 1 See more

cert-manager-webhook-bunny cert-manager-webhook-bunny 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
ghcr.io/o0th/cert-manager-webhook-bunny :1.0.2	fe7ce555a12d	stdlib@go1.23.5	1.25.12

Open the chart page →

839

cert-manager-webhook-civocert-manager-webhook-civo

0.0.0-05b683cb6efdc99135f68af18007954e74f18404

1 of 1 See more

cert-manager-webhook-civo cert-manager-webhook-civo 0.0.0-05b683cb6efdc99135f68af18007954e74f18404

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
okteto/civo-webhook :0.5.3	57cd51176538	stdlib@go1.21.3	1.25.12

Open the chart page →

1,278

cert-manager-webhook-hcloud-zonescert-manager-webhook-hcloud-zones

0.1.5

1 of 1 See more

cert-manager-webhook-hcloud-zones cert-manager-webhook-hcloud-zones 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
ghcr.io/xmv-solutions-gmbh/cert-manager-webhook-hcloud-zones :0.1.5	a7a846bba3e8	stdlib@go1.25.11	1.25.12

Open the chart page →

415

cert-manager-webhook-infoblox-wapicert-manager-webhook-infoblox-wapi

1.5.2

1 of 1 See more

cert-manager-webhook-infoblox-wapi cert-manager-webhook-infoblox-wapi 1.5.2

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
ghcr.io/luisico/cert-manager-webhook-infoblox-wapi :1.5	ded797477896	stdlib@go1.16.15	1.25.12

Open the chart page →

2,352

cert-manager-webhook-namecheapcert-manager-webhook-namecheap

0.1.2

1 of 1 See more

cert-manager-webhook-namecheap cert-manager-webhook-namecheap 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
ghcr.io/extrality/cert-manager-webhook-namecheap :latest	e3552fa0c68a	stdlib@go1.20.6	1.25.12

Open the chart page →

1,759

cert-manager-webhook-pdnscert-manager-webhook-pdns

3.2.5

1 of 1 See more

cert-manager-webhook-pdns cert-manager-webhook-pdns 3.2.5

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
zachomedia/cert-manager-webhook-pdns :v2.5.5	4940e227a39b	stdlib@go1.26.1	1.25.12

Open the chart page →

1,080

cert-manager-webhook-regerycert-manager-webhook-regery

1.0.0

1 of 1 See more

cert-manager-webhook-regery cert-manager-webhook-regery 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
darioackermann/cert-manager-webhook-regery :latest	0d450bc4acc4	stdlib@go1.22.10	1.25.12

Open the chart page →

889

cert-manager-webhook-solidservercert-manager-webhook-solidserver

1.0.2

1 of 1 See more

cert-manager-webhook-solidserver cert-manager-webhook-solidserver 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
ghcr.io/niklas-letz/cert-manager-webhook-solidserver :1.0.2	f19a306ce759	stdlib@go1.26.4	1.25.12

Open the chart page →

527

cert-utils-operatorcert-utils-operator

1.3.12

2 of 2 See more

cert-utils-operator cert-utils-operator 1.3.12

2 of the 2 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
quay.io/redhat-cop/cert-utils-operator :v1.3.12	0290e7b2800a	stdlib@go1.19.13	1.25.12
quay.io/redhat-cop/kube-rbac-proxy :v0.11.0	c68135620167	stdlib@go1.15.15	1.25.12

Open the chart page →

7,783

Container images carrying it

4,913 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
otel/opentelemetry-collector-contrib :0.156.0	125bdbeb7590	stdlib@go1.26.4	1.25.12	2
otel/opentelemetry-collector-contrib :0.96.0	7ef2a2ff46b9	stdlib@go1.21.7	1.25.12	2
otel/opentelemetry-collector-k8s :0.111.0	32b3c8296dcc	stdlib@go1.23.2	1.25.12	2
outlinewiki/outline :0.69.1	d060dcd8f9aa	stdlib@go1.19.4	1.25.12	2
passbolt/passbolt :3.4.0-ce-non-root	655547e17263	stdlib@go1.14.4	1.25.12	2
percona/everest-helmtools :0.0.1	904458d04a18	stdlib@go1.24.6	1.25.12	2
pgautoupgrade/pgautoupgrade :18-alpine	48b448825656	stdlib@go1.24.6	1.25.12	2
pgvector/pgvector :0.8.5-pg18-trixie	9d2e61c7352b	stdlib@go1.24.6	1.25.12	2
pgvector/pgvector :0.8.6-pg16-bookworm :pg16	ccc6e83d6e35	stdlib@go1.24.6	1.25.12	2
phntom/kochi :1.1.3	3b82358bd56e	stdlib@go1.15.5	1.25.12	2
place1/wg-access-server :v0.4.6	2b2f3ea80ed6	stdlib@go1.13.8	1.25.12	2
polyaxon/polyaxon-operator :2.16.4	2716f552b301	stdlib@go1.24.13	1.25.12	2
postgis/postgis :15-3.3	a2fc46b52819	stdlib@go1.18.2	1.25.12	2
pottava/s3-proxy :2.0	20a0bcb15f76	stdlib@go1.13.7	1.25.12	2
prom/blackbox-exporter :v0.18.0	1ffc3f109eb3	stdlib@go1.15.2	1.25.12	2
prom/prometheus :v2.17.2	42d2395cd719	stdlib@go1.13.10	1.25.12	2
prom/prometheus :v2.52.0	5c435642ca4d	stdlib@go1.22.3	1.25.12	2
prom/prometheus :v2.37.9	8176adea328e	stdlib@go1.19.11	1.25.12	2
prom/prometheus :v2.48.1	a67e5e402ff5	stdlib@go1.21.5	1.25.12	2
prom/prometheus :v2.21.0	d43417c260e5	stdlib@go1.15.2	1.25.12	2
prom/pushgateway :v1.0.1	a5df60347882	stdlib@go1.13.5	1.25.12	2
prom/pushgateway :v1.3.0	c0d39b8d4cfe	stdlib@go1.15.2	1.25.12	2
qingcloud/cloud-controller-manager :v1.4.12	10f66b5df886	stdlib@go1.18.2	1.25.12	2
qingcloud/hostnic-plus :v1.0.3	4cd5366a9f51	stdlib@go1.16.3	1.25.12	2
qmcgaw/ddns-updater :2.10.0 :v2.10.0	3e2aa558946b	stdlib@go1.26.2	1.25.12	2
rajnandan1/kener :3.2.19	30407afca731	stdlib@go1.20.7	1.25.12	2
rancher/k3s :v1.26.0-k3s1	9380f5dbae9a	stdlib@go1.19.4	1.25.12	2
rancher/kine :v0.11.4	12889bbcd1e8	stdlib@go1.21.5	1.25.12	2
rancher/kubectl :v1.36.2	06c7a7a97727	stdlib@go1.26.4	1.25.12	2
rancher/local-path-provisioner :v0.0.35	34ff0847cc47	stdlib@go1.26.1	1.25.12	2
rancher/local-path-provisioner :v0.0.29	9bebefa0b908	stdlib@go1.22.5	1.25.12	2
rclone/rclone :1.68	74c51b8817e5	stdlib@go1.23.3	1.25.12	2
ribbybibby/ssl-exporter :2.4.2	718abe7f5e79	stdlib@go1.18.3	1.25.12	2
rookout/controller :latest	4451a6f6b8ec	stdlib@go1.20.5	1.25.12	2
rookout/data-on-prem :latest	51c0fce64467	stdlib@go1.20.5	1.25.12	2
rss3/op-batcher :a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8a	dae8a5bdd7a6	stdlib@go1.21.3	1.25.12	2
rss3/op-proposer :a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8a	a4059dd32c48	stdlib@go1.21.3	1.25.12	2
samcm/ethereum-metrics-exporter :0.29.2 :latest	91a2d9a015c1	stdlib@go1.25.8	1.25.12	2
scaleway/cert-manager-webhook-scaleway :v0.0.1	dcc14608d000	stdlib@go1.15.2	1.25.12	2
shlinkio/shlink :5.1.6 :stable	666cc24edf72	stdlib@go1.26.4	1.25.12	2
sikalabs/hello-world-server :latest	5f49bf889a64	stdlib@go1.26.2	1.25.12	2
squareup/ghostunnel :v1.5.2	70f4cf270425	stdlib@go1.13.4	1.25.12	2
starrocks/operator :v1.11.7	8c20435a7579	stdlib@go1.22.12	1.25.12	2
statping/statping :v0.90.74	e874da513a5c	stdlib@go1.14.13	1.25.12	2
streamnative/apache-pulsar-grafana-dashboard-k8s :0.1.2	0e6d7aa3ef32	stdlib@go1.20.4	1.25.12	2
syncthing/syncthing :2.1.1	775c4aac4862	stdlib@go1.26.3	1.25.12	2
taigaio/taiga-back :latest	4beed8f62c9f	stdlib@go1.24.4	1.25.12	2
taigaio/taiga-protected :latest	fd4568a97a59	stdlib@go1.24.4	1.25.12	2
temporalio/server :1.22.4	c0a44c26397b	stdlib@go1.20.11	1.25.12	2
temporalio/ui :2.16.2	af9c9349708f	stdlib@go1.20.5	1.25.12	2