CVE-2026-39822

Unscored

Advisory

Published 7 Jul 2026In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.002; 14th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 4,226; of 17,790 indexed, latest versions
Container images: 4,913; deployed by those charts
Fix available: 1 of 1; affected package

Root escape via symlink plus trailing slash in os

Carried by container images the latest versions of 4,226 of 17,790 indexed charts deploy, on 4,913 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+186 more	1.25.12	4,913

OSV records: GO-2026-4970
Also known as: BIT-golang-2026-39822

Charts affected

4,226 by stars

Chart

Latest

Affected images

Radar Score

stable-hacalltelemetry

0.11.4

3 of 7 See more

stable-ha calltelemetry 0.11.4

3 of the 7 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
library/nats :2.10.12-alpine	bca70839d953	stdlib@go1.21.8	1.25.12
natsio/nats-box :0.14.2	e808e0644ce1	stdlib@go1.21.5	1.25.12
natsio/nats-server-config-reloader :0.14.1	0d50270fa374	stdlib@go1.20.5	1.25.12

Open the chart page →

4,705

pagescamden-pages

1.0.0

1 of 3 See more

pages camden-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.12

Open the chart page →

20,242

camellia-redis-proxycamellia-redis-proxy

1.4.0

1 of 2 See more

camellia-redis-proxy camellia-redis-proxy 1.4.0

1 of the 2 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
library/redis :5.0	fc5ecd863862	stdlib@go1.16.7	1.25.12

Open the chart page →

8,024

geoservercamptocamp2

0.0.3

1 of 12 See more

geoserver camptocamp2 0.0.3

1 of the 12 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
library/postgres :12	2f2a8c2a7d10	stdlib@go1.18.2	1.25.12

Open the chart page →

88,618

bucket-clonercamptocamp3

1.0.4

1 of 1 See more

bucket-cloner camptocamp3 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
camptocamp/bucket-cloner :latest	acfafc308d88	stdlib@go1.16.5	1.25.12

Open the chart page →

4,525

getconfigcamptocamp3

0.1.1

1 of 1 See more

getconfig camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
quay.io/oauth2-proxy/oauth2-proxy :v7.3.0	8c21390be87d	stdlib@go1.17.10	1.25.12

Open the chart page →

2,201

prometheus-puppetdb-sdcamptocamp3

8.0.2

1 of 2 See more

prometheus-puppetdb-sd camptocamp3 8.0.2

1 of the 2 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
ghcr.io/camptocamp/prometheus-puppetdb-sd :0.14.0	414c0c99fd06	stdlib@go1.23.5	1.25.12

Open the chart page →

6,153

redisoperatorcamptocamp3

3.0.1

1 of 1 See more

redisoperator camptocamp3 3.0.1

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
quay.io/spotahome/redis-operator :latest	8c772955184e	stdlib@go1.20.7	1.25.12

Open the chart page →

1,193

s3-exportercamptocamp3

2.2.0

1 of 1 See more

s3-exporter camptocamp3 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
ribbybibby/s3-exporter :v0.5.0	998184c51a00	stdlib@go1.15.15	1.25.12

Open the chart page →

1,183

snyk-exportercamptocamp3

0.1.4

1 of 1 See more

snyk-exporter camptocamp3 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
quay.io/lunarway/snyk_exporter :v1.11.1	55e5cc5aaa0a	stdlib@go1.17.7	1.25.12

Open the chart page →

1,079

ssl-exportercamptocamp3

0.1.0

1 of 1 See more

ssl-exporter camptocamp3 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
ribbybibby/ssl-exporter :2.4.2	718abe7f5e79	stdlib@go1.18.3	1.25.12

Open the chart page →

1,632

terraboardcamptocamp3

2.4.0

1 of 1 See more

terraboard camptocamp3 2.4.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
ghcr.io/camptocamp/terraboard :v2.3.0	df53e2c8998c	stdlib@go1.21.3	1.25.12

Open the chart page →

1,336

apachecamptocamp-apache

0.4.0

1 of 2 See more

apache camptocamp-apache 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
quay.io/lusitaniae/apache-exporter :latest	438b1b6177eb	stdlib@go1.25.11	1.25.12

Open the chart page →

1,490

caninecanine

0.1.10

6 of 7 See more

canine canine 0.1.10

6 of the 7 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
library/traefik :v3.7.1	6b9cbca6fac4	stdlib@go1.25.10	1.25.12
ghcr.io/caninehq/canine :latest	a058034ca006	stdlib@go1.22.7	1.25.12
quay.io/jetstack/cert-manager-cainjector :v1.15.3	e0ce8ae280c8	stdlib@go1.22.5	1.25.12
quay.io/jetstack/cert-manager-controller :v1.15.3	eee34b3de2dd	stdlib@go1.22.5	1.25.12
quay.io/jetstack/cert-manager-startupapicheck :v1.15.3	4cbc1b022a23	stdlib@go1.22.5	1.25.12
quay.io/jetstack/cert-manager-webhook :v1.15.3	fdcb9ac4963f	stdlib@go1.22.5	1.25.12

Open the chart page →

14,179

cert-managercanine

1.15.3

4 of 4 See more

cert-manager canine 1.15.3

4 of the 4 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-cainjector :v1.15.3	e0ce8ae280c8	stdlib@go1.22.5	1.25.12
quay.io/jetstack/cert-manager-controller :v1.15.3	eee34b3de2dd	stdlib@go1.22.5	1.25.12
quay.io/jetstack/cert-manager-startupapicheck :v1.15.3	4cbc1b022a23	stdlib@go1.22.5	1.25.12
quay.io/jetstack/cert-manager-webhook :v1.15.3	fdcb9ac4963f	stdlib@go1.22.5	1.25.12

Open the chart page →

2,894

traefikcanine

40.2.0

1 of 1 See more

traefik canine 40.2.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
library/traefik :v3.7.1	6b9cbca6fac4	stdlib@go1.25.10	1.25.12

Open the chart page →

1,028

capi2argo-cluster-operatorcapi2argo

1.5.0

1 of 1 See more

capi2argo-cluster-operator capi2argo 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
ghcr.io/dntosas/capi2argo-cluster-operator :v1.5.0	fb8c6457ef6e	stdlib@go1.25.6	1.25.12

Open the chart page →

281

capsule-argo-addoncapsule-argo-addon

0.7.5

2 of 2 See more

capsule-argo-addon capsule-argo-addon 0.7.5

2 of the 2 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
clastix/kubectl :v1.31	22918a06c253	stdlib@go1.22.5	1.25.12
ghcr.io/peak-scale/capsule-argo-addon :0.7.5	087a80163971	stdlib@go1.24.13	1.25.12

Open the chart page →

2,046

freebox-exportercaptnbp

1.0.0

1 of 1 See more

freebox-exporter captnbp 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
captnbp/freebox-exporter :1.0.0-r0	1600c5a253e0	stdlib@go1.21.3	1.25.12

Open the chart page →

717

ranchercarbide-charts

2.15.1

1 of 2 See more

rancher carbide-charts 2.15.1

1 of the 2 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
rancher/rancher :v2.15.1	5f6c4dc52a05	stdlib@go1.26.4	1.25.12

Open the chart page →

1,487

stigatroncarbide-charts

0.4.1

3 of 10 See more

stigatron carbide-charts 0.4.1

3 of the 10 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
library/nats :2.10.5-alpine	85319e5e541b	stdlib@go1.21.4	1.25.12
natsio/nats-box :0.14.1	a67913df95f1	stdlib@go1.21.3	1.25.12
natsio/nats-server-config-reloader :0.13.0	b3359eeb10bf	stdlib@go1.20.5	1.25.12

Open the chart page →

4,423

pagescarina-pages

1.0.0

1 of 3 See more

pages carina-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.12

Open the chart page →

20,242

pagescarmel-pages-dell

1.0.0

1 of 3 See more

pages carmel-pages-dell 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.12

Open the chart page →

20,242

casdoor-helm-chartscasdoor

4.4.0

1 of 1 See more

casdoor-helm-charts casdoor 4.4.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
casbin/casdoor :4.4.0	8511c0757ac3	stdlib@go1.25.8	1.25.12

Open the chart page →

1,110

cassandra-webcassandra-web

0.1.0

1 of 1 See more

cassandra-web cassandra-web 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
ipushc/cassandra-web :latest	fa3e0c66c289	stdlib@go1.20.2	1.25.12

Open the chart page →

1,301

castai-evictorcastai

0.35.145

1 of 3 See more

castai-evictor castai 0.35.145

1 of the 3 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
registry.k8s.io/kubectl :v1.35.6	4d8c68e8c2bf	stdlib@go1.25.11	1.25.12

Open the chart page →

144

castai-tetragoncastai

0.6.1

2 of 4 See more

castai-tetragon castai 0.6.1

2 of the 4 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
quay.io/cilium/tetragon-ci :b6f3056a3f6cf05e366a3e07348f7c0b6265a60f	5efd991d218b	stdlib@go1.19.2	1.25.12
quay.io/cilium/tetragon-operator :v0.8.3	4ab8e6604204	stdlib@go1.18.3	1.25.12

Open the chart page →

4,143

castware-componentscastai

0.4.0

1 of 1 See more

castware-components castai 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
lachlanevenson/k8s-kubectl :v1.25.4	af5cea3f2e40	stdlib@go1.19.3	1.25.12

Open the chart page →

3,451

oci-csi-drivercastai

1.13.8

6 of 7 See more

oci-csi-driver castai 1.13.8

6 of the 7 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-attacher :v4.12.0	b9dc9a714a48	stdlib@go1.26.3	1.25.12
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.17.0	f9de845b1701	stdlib@go1.26.3	1.25.12
registry.k8s.io/sig-storage/csi-provisioner :v6.3.0	a4b0b1a37605	stdlib@go1.26.3	1.25.12
registry.k8s.io/sig-storage/csi-resizer :v2.2.0	a2d40c1c3ccb	stdlib@go1.26.3	1.25.12
registry.k8s.io/sig-storage/csi-snapshotter :v8.6.0	42af0929bcd6	stdlib@go1.26.3	1.25.12
registry.k8s.io/sig-storage/snapshot-controller :v8.6.0	81e79f205083	stdlib@go1.26.3	1.25.12

Open the chart page →

1,739

temporalcastai

0.54.2

10 of 14 See more

temporal castai 0.54.2

10 of the 14 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
grafana/grafana :11.0.0	0dc5a246ab16	stdlib@go1.21.10	1.25.12
temporalio/admin-tools :1.26.2	37e2e33dbd7b	stdlib@go1.22.5	1.25.12
temporalio/server :1.26.2	1e2626efcbc1	stdlib@go1.23.2	1.25.12
temporalio/ui :2.33.0	5c586a3c8ec5	stdlib@go1.23.0	1.25.12
quay.io/prometheus-operator/prometheus-config-reloader :v0.74.0	d55631c7a740	stdlib@go1.22.3	1.25.12
quay.io/prometheus/alertmanager :v0.27.0	e13b6ed5cb92	stdlib@go1.21.7	1.25.12
quay.io/prometheus/node-exporter :v1.8.1	fa7fa12a57ef	stdlib@go1.22.3	1.25.12
quay.io/prometheus/prometheus :v2.53.0	075b1ba2c4eb	stdlib@go1.22.4	1.25.12
quay.io/prometheus/pushgateway :v1.8.0	c159e946abf4	stdlib@go1.22.1	1.25.12
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.12.0	b401fae262a5	stdlib@go1.21.8	1.25.12

Open the chart page →

16,232

catalyst-agentscatalyst-agents

0.1.31

11 of 18 See more

catalyst-agents catalyst-agents 0.1.31

11 of the 18 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
alpine/k8s :1.32.3	eec354133193	stdlib@go1.23.6	1.25.12
grafana/grafana :13.1.3	ab5cb380e3ff	stdlib@go1.26.3	1.25.12
grafana/loki :3.0.0	757b5fadf816	stdlib@go1.21.9	1.25.12
grafana/loki-canary :3.0.0	28d7c00588aa	stdlib@go1.21.9	1.25.12
grafana/tempo :2.5.0	f0200a9bff6d	stdlib@go1.21.3	1.25.12
otel/opentelemetry-collector-contrib :0.156.0	125bdbeb7590	stdlib@go1.26.4	1.25.12
prom/memcached-exporter :v0.14.2	d8a61419b841	stdlib@go1.21.5	1.25.12
ghcr.io/chaos-mesh/chaos-coredns :v0.2.8	38bfdf5e3774	stdlib@go1.25.5	1.25.12
ghcr.io/chaos-mesh/chaos-daemon :v2.8.3	69b1d3c09cfa	stdlib@go1.25.11	1.25.12
ghcr.io/chaos-mesh/chaos-mesh :v2.8.3	bdb31f3121a2	stdlib@go1.25.11	1.25.12
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.19.1	85108987d044	stdlib@go1.26.4	1.25.12

Open the chart page →

17,099

mongodb-operatorccowley

0.1.1

1 of 1 See more

mongodb-operator ccowley 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
quay.io/mongodb/mongodb-kubernetes-operator :0.3.0	107a7c73af59	stdlib@go1.14.10	1.25.12

Open the chart page →

6,389

openldapccowley

2.0.4

1 of 3 See more

openldap ccowley 2.0.4

1 of the 3 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
osixia/openldap :1.4.0	ccd95cc6e61e	stdlib@go1.13.4	1.25.12

Open the chart page →

6,219

openldap_exporterccowley

0.1.0

1 of 1 See more

openldap_exporter ccowley 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
quay.io/chriscowley/openldap_exporter :v2.1.1	6c308e9732e1	stdlib@go1.15.7	1.25.12

Open the chart page →

2,143

kube-ceemsceems

1.40.0

1 of 5 See more

kube-ceems ceems 1.40.0

1 of the 5 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
grafana/grafana :13.2.1-distroless	3600073f45a9	stdlib@go1.26.4	1.25.12

Open the chart page →

647

cerberuscerberus

0.16.0

1 of 1 See more

cerberus cerberus 0.16.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
ghcr.io/tsouza/cerberus :1.20.0	ef384585f9a3	stdlib@go1.26.2	1.25.12

Open the chart page →

162

cert-manager-csi-driver-spiffecert-manager

0.15.0

2 of 4 See more

cert-manager-csi-driver-spiffe cert-manager 0.15.0

2 of the 4 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.17.0	f9de845b1701	stdlib@go1.26.3	1.25.12
registry.k8s.io/sig-storage/livenessprobe :v2.19.0	06da0d5b8908	stdlib@go1.26.3	1.25.12

Open the chart page →

585

cert-manager-acm-synccert-manager-acm-sync

0.7.4

1 of 1 See more

cert-manager-acm-sync cert-manager-acm-sync 0.7.4

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
ghcr.io/camilorivera/cert-manager-acm-sync :0.7.4	89a83796a550	stdlib@go1.26.4	1.25.12

Open the chart page →

132

cert-manager-alidns-webhookcert-manager-alidns-webhook

0.1.4

1 of 1 See more

cert-manager-alidns-webhook cert-manager-alidns-webhook 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
ghcr.io/crazygit/cert-manager-alidns-webhook :0.1.4	976be6506eb6	stdlib@go1.25.3	1.25.12

Open the chart page →

1,328

cert-manager-desec-webhookcert-manager-desec-webhook

1.0.1

1 of 1 See more

cert-manager-desec-webhook cert-manager-desec-webhook 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
ghcr.io/luzifer/cert-manager-desec-webhook :v1.0.1	fa1f6b2e9a6e	stdlib@go1.23.4	1.25.12

Open the chart page →

1,271

cert-manager-webhook-abioncert-manager-webhook-abion

1.3.2

1 of 1 See more

cert-manager-webhook-abion cert-manager-webhook-abion 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
abiondevelopment/cert-manager-webhook-abion :latest	c741988fbd23	stdlib@go1.25.1	1.25.12

Open the chart page →

1,094

cert-manager-webhook-bunnycert-manager-webhook-bunny

1.0.2

1 of 1 See more

cert-manager-webhook-bunny cert-manager-webhook-bunny 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
ghcr.io/o0th/cert-manager-webhook-bunny :1.0.2	fe7ce555a12d	stdlib@go1.23.5	1.25.12

Open the chart page →

839

cert-manager-webhook-civocert-manager-webhook-civo

0.0.0-05b683cb6efdc99135f68af18007954e74f18404

1 of 1 See more

cert-manager-webhook-civo cert-manager-webhook-civo 0.0.0-05b683cb6efdc99135f68af18007954e74f18404

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
okteto/civo-webhook :0.5.3	57cd51176538	stdlib@go1.21.3	1.25.12

Open the chart page →

1,278

cert-manager-webhook-hcloud-zonescert-manager-webhook-hcloud-zones

0.1.5

1 of 1 See more

cert-manager-webhook-hcloud-zones cert-manager-webhook-hcloud-zones 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
ghcr.io/xmv-solutions-gmbh/cert-manager-webhook-hcloud-zones :0.1.5	a7a846bba3e8	stdlib@go1.25.11	1.25.12

Open the chart page →

415

cert-manager-webhook-infoblox-wapicert-manager-webhook-infoblox-wapi

1.5.2

1 of 1 See more

cert-manager-webhook-infoblox-wapi cert-manager-webhook-infoblox-wapi 1.5.2

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
ghcr.io/luisico/cert-manager-webhook-infoblox-wapi :1.5	ded797477896	stdlib@go1.16.15	1.25.12

Open the chart page →

2,352

cert-manager-webhook-namecheapcert-manager-webhook-namecheap

0.1.2

1 of 1 See more

cert-manager-webhook-namecheap cert-manager-webhook-namecheap 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
ghcr.io/extrality/cert-manager-webhook-namecheap :latest	e3552fa0c68a	stdlib@go1.20.6	1.25.12

Open the chart page →

1,759

cert-manager-webhook-pdnscert-manager-webhook-pdns

3.2.5

1 of 1 See more

cert-manager-webhook-pdns cert-manager-webhook-pdns 3.2.5

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
zachomedia/cert-manager-webhook-pdns :v2.5.5	4940e227a39b	stdlib@go1.26.1	1.25.12

Open the chart page →

1,080

cert-manager-webhook-regerycert-manager-webhook-regery

1.0.0

1 of 1 See more

cert-manager-webhook-regery cert-manager-webhook-regery 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
darioackermann/cert-manager-webhook-regery :latest	0d450bc4acc4	stdlib@go1.22.10	1.25.12

Open the chart page →

889

cert-manager-webhook-solidservercert-manager-webhook-solidserver

1.0.2

1 of 1 See more

cert-manager-webhook-solidserver cert-manager-webhook-solidserver 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
ghcr.io/niklas-letz/cert-manager-webhook-solidserver :1.0.2	f19a306ce759	stdlib@go1.26.4	1.25.12

Open the chart page →

527

cert-utils-operatorcert-utils-operator

1.3.12

2 of 2 See more

cert-utils-operator cert-utils-operator 1.3.12

2 of the 2 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
quay.io/redhat-cop/cert-utils-operator :v1.3.12	0290e7b2800a	stdlib@go1.19.13	1.25.12
quay.io/redhat-cop/kube-rbac-proxy :v0.11.0	c68135620167	stdlib@go1.15.15	1.25.12

Open the chart page →

7,783

Container images carrying it

4,913 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
alcounit/browser-ui :v0.0.9	6a977c92ef27	stdlib@go1.25.0	1.25.12	1
alcounit/selenosis :v2.1.1	d01a9dbbd943	stdlib@go1.25.0	1.25.12	1
alex6021710/ai-scale-auth :latest	6c7a47e470c3	stdlib@go1.16.12	1.25.12	1
alex6021710/ai-scale-doer :latest	31e533cf7cd3	stdlib@go1.16.10	1.25.12	1
alex6021710/ai-scale-migrator :latest	744b8a924f35	stdlib@go1.17.2	1.25.12	1
alex6021710/ai-scale-provider :latest	5837d9b30cc7	stdlib@go1.15.8	1.25.12	1
alex6021710/ai-scale-saver :latest	f73e8d60fd03	stdlib@go1.17	1.25.12	1
alireza7/s-ui :1.5.3	02aa86983cdb	stdlib@go1.26.4	1.25.12	1
allegroai/clearml-agent-k8s-base :1.24-21	772827a01bb5	stdlib@go1.18.1	1.25.12	1
almasood/book-server :latest	6ffac9b63cdf	stdlib@go1.24.6	1.25.12	1
almir/webhook :2.8.0	1698346f6077	stdlib@go1.14.7	1.25.12	1
almorgv/gitlab-code-review-notifier :0.1.2	5f2a7d2b44d8	stdlib@go1.14.15	1.25.12	1
alpine/git :2.36.3	66b210a97bc0	stdlib@go1.18.7	1.25.12	1
alpine/git :v2.49.1	c0280cf95723	stdlib@go1.24.8	1.25.12	1
alpine/helm	105741fa6621	stdlib@go1.22.5	1.25.12	1
alpine/helm :4.1.0	905a068da431	stdlib@go1.25.6	1.25.12	1
alpine/k8s :1.22.6	00ac10bcb759	stdlib@go1.17.6	1.25.12	1
alpine/k8s :1.27.3	21b24e6bf801	stdlib@go1.20.4	1.25.12	1
alpine/k8s :1.36.2	44ef4942e171	stdlib@go1.26.3	1.25.12	1
alpine/k8s :1.31.10	6dbe6f391eda	stdlib@go1.22.7	1.25.12	1
alpine/k8s :1.31.13	7a319b15cfc9	stdlib@go1.23.12	1.25.12	1
alpine/k8s :1.32.4	7e1e7d5b7a96	stdlib@go1.20.4	1.25.12	1
alpine/k8s :1.31.4	9c4976d47656	stdlib@go1.23.2	1.25.12	1
alpine/k8s :1.18.16	a41efe02a041	stdlib@go1.15.2	1.25.12	1
alpine/k8s :1.37.0	b421c2e9419e	stdlib@go1.24.0	1.25.12	1
alpine/k8s :1.35.6	b7a12c5ddf26	stdlib@go1.26.3	1.25.12	1
alpine/k8s :1.30.0	bd01dae02676	stdlib@go1.21.1	1.25.12	1
alpine/k8s :1.30.2	cd560fce90f7	stdlib@go1.22.3	1.25.12	1
alpine/k8s :1.35.5	d870622d0040	stdlib@go1.26.0	1.25.12	1
alpine/k8s :1.28.13	e5c0b053fed7	stdlib@go1.22.5	1.25.12	1
alpine/k8s :1.32.3	eec354133193	stdlib@go1.23.6	1.25.12	1
alpine/k8s :1.28.2	fc059f056ad0	stdlib@go1.20.8	1.25.12	1
alpine/kubectl :1.36.0	1ee9df6316d4	stdlib@go1.26.2	1.25.12	1
alpine/kubectl :1.33.3	2c59a3f0726c	stdlib@go1.24.4	1.25.12	1
alpine/kubectl :1.35.0	862d86046bbc	stdlib@go1.25.5	1.25.12	1
alpine/kubectl :1.35.3	c4a11ae9a1cb	stdlib@go1.25.7	1.25.12	1
altinity/clickhouse-operator :0.25.4	1d6f18dbd599	stdlib@go1.25.1	1.25.12	1
altinity/clickhouse-operator :0.23.3	4baec90b20cd	stdlib@go1.20.14	1.25.12	1
altinity/clickhouse-operator :0.23.7	74315beb57db	stdlib@go1.21.13	1.25.12	1
altinity/clickhouse-operator :0.19.0	7a85f522c5bc	stdlib@go1.17.13	1.25.12	1
altinity/clickhouse-operator :0.20.0	8f0f582d41f0	stdlib@go1.17.13	1.25.12	1
altinity/clickhouse-operator :0.27.1	a802b3a19d20	stdlib@go1.26.3	1.25.12	1
altinity/clickhouse-operator :0.16.1	db7dde971407	stdlib@go1.13.15	1.25.12	1
altinity/metrics-exporter :0.20.0	1a46d104406d	stdlib@go1.17.13	1.25.12	1
altinity/metrics-exporter :0.23.3	2912a6c15b44	stdlib@go1.20.14	1.25.12	1
altinity/metrics-exporter :0.25.4	6ecf67edfb71	stdlib@go1.25.1	1.25.12	1
altinity/metrics-exporter :0.16.1	85b4fdbae053	stdlib@go1.13.15	1.25.12	1
altinity/metrics-exporter :0.23.7	a4d7ff0c727e	stdlib@go1.21.13	1.25.12	1
amaanx86/oci-native-ingress-controller :master	d7206ac7a319	stdlib@go1.23.7	1.25.12	1
amazon/aws-efs-csi-driver :v0.3.0	b55277652ea8	stdlib@go1.13.4	1.25.12	1