CVE-2026-39822

Unscored

Advisory

Published 7 Jul 2026In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.002; 14th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 4,207; of 17,797 indexed, latest versions
Container images: 4,886; deployed by those charts
Fix available: 1 of 1; affected package

Root escape via symlink plus trailing slash in os

Carried by container images the latest versions of 4,207 of 17,797 indexed charts deploy, on 4,886 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+186 more	1.25.12	4,886

OSV records: GO-2026-4970
Also known as: BIT-golang-2026-39822

Charts affected

4,207 by stars

Chart

Latest

Affected images

Radar Score

steampipe-powerpipe-kubernetessteampipe-powerpipe-kubernetes

0.13.1

2 of 2 See more

steampipe-powerpipe-kubernetes steampipe-powerpipe-kubernetes 0.13.1

2 of the 2 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--powerpipe :latest	a16ab5ca10a7	stdlib@go1.26.1	1.25.12
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--steampipe :latest	c0c8d53df9f3	stdlib@go1.26.1	1.25.12

Open the chart page →

5,538

trivy-operator-polr-adaptertrivy-operator-polr-adapter

0.11.5

1 of 1 See more

trivy-operator-polr-adapter trivy-operator-polr-adapter 0.11.5

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
ghcr.io/fjogeleit/trivy-operator-polr-adapter :0.11.5	37029b4d464f	stdlib@go1.26.4	1.25.12

Open the chart page →

uffizzi-appuffizzi-app

1.3.0

8 of 14 See more

uffizzi-app uffizzi-app 1.3.0

8 of the 14 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
uffizzi/controller :latest	0344805f267b	stdlib@go1.20.14	1.25.12
uffizzi/uffizzi-cluster-operator :v1.4.5	14e528bbd926	stdlib@go1.19.13	1.25.12
quay.io/jetstack/cert-manager-cainjector :v1.13.2	858fee0c4af0	stdlib@go1.20.10	1.25.12
quay.io/jetstack/cert-manager-controller :v1.13.2	9c67cf8c92d8	stdlib@go1.20.10	1.25.12
quay.io/jetstack/cert-manager-ctl :v1.13.2	4d9fce2c050e	stdlib@go1.20.10	1.25.12
quay.io/jetstack/cert-manager-webhook :v1.13.2	0a9470447ebf	stdlib@go1.20.10	1.25.12
registry.k8s.io/ingress-nginx/controller :v1.9.4	5b161f051d01	stdlib@go1.21.3	1.25.12
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20231011-8b53cabe0	a7943503b45d	stdlib@go1.21.3	1.25.12

Open the chart page →

19,431

vault-operatorvault-operator

1.24.0

1 of 1 See more

vault-operator vault-operator 1.24.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
ghcr.io/bank-vaults/vault-operator :v1.24.0	6f622c5fb8a9	stdlib@go1.26.3	1.25.12

Open the chart page →

542

vault-secrets-webhookvault-secrets-webhook

1.23.1

1 of 1 See more

vault-secrets-webhook vault-secrets-webhook 1.23.1

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
ghcr.io/bank-vaults/vault-secrets-webhook :v1.23.1	98baf045a1c9	stdlib@go1.26.4	1.25.12

Open the chart page →

526

athens-proxyvolker-raschek

2.0.3

1 of 1 See more

athens-proxy volker-raschek 2.0.3

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
gomods/athens :v0.17.1	0f61d1e62359	stdlib@go1.25.9	1.25.12

Open the chart page →

2,042

wg-easywg-easy

0.1.6

1 of 1 See more

wg-easy wg-easy 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
ghcr.io/wg-easy/wg-easy :15	0e7bc9d34e86	stdlib@go1.26.3	1.25.12

Open the chart page →

727

dexwiremind

2.15.7

1 of 2 See more

dex wiremind 2.15.7

1 of the 2 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
quay.io/dexidp/dex :v2.24.0	c9b7f6d0d953	stdlib@go1.13.10	1.25.12

Open the chart page →

13,587

yunikornyunikorn

1.9.0

3 of 3 See more

yunikorn yunikorn 1.9.0

3 of the 3 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
apache/yunikorn :web-1.9.0	288e9c2db7f7	stdlib@go1.26.4	1.25.12
apache/yunikorn :scheduler-1.9.0	96832082e9cf	stdlib@go1.26.4	1.25.12
apache/yunikorn :admission-1.9.0	fe8f5ec91f6c	stdlib@go1.26.4	1.25.12

Open the chart page →

412

eshoponabpabp-charts

1.0.0

2 of 15 See more

eshoponabp abp-charts 1.0.0

2 of the 15 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
library/mongo :4.2	699d652ed674	stdlib@go1.18.2	1.25.12
library/postgres :14.1	3162a6ead070	stdlib@go1.16.7	1.25.12

Open the chart page →

19,818

moon2aerokube

2.8.1

3 of 3 See more

moon2 aerokube 2.8.1

3 of the 3 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
quay.io/aerokube/moon :2.8.1	e618a3ed6436	stdlib@go1.26.1	1.25.12
quay.io/aerokube/moon-conf :2.8.1	1ef2b53c98fd	stdlib@go1.26.1	1.25.12
quay.io/aerokube/moon-ui :2.8.1	56425d4f8b9c	stdlib@go1.26.1	1.25.12

Open the chart page →

762

alerta-webalerta-web

0.1.12

1 of 2 See more

alerta-web alerta-web 0.1.12

1 of the 2 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :15.2.0-debian-11-r11	3e65a6b89e38	stdlib@go1.18.2	1.25.12

Open the chart page →

3,569

pod-gatewayangelnu

7.1.1

1 of 2 See more

pod-gateway angelnu 7.1.1

1 of the 2 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
ghcr.io/angelnu/gateway-admision-controller :v3.12.0	6f6ab596afd5	stdlib@go1.24.2	1.25.12

Open the chart page →

1,134

ansible-semaphoreansible-semaphore

0.1.0

1 of 1 See more

ansible-semaphore ansible-semaphore 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
ansiblesemaphore/semaphore :v2.8.53	03d1f8684027	stdlib@go1.16.3	1.25.12

Open the chart page →

4,019

aperture-controlleraperture

2.34.0

3 of 5 See more

aperture-controller aperture 2.34.0

3 of the 5 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
fluxninja/aperture-operator :2.34.0	356d7aa86632	stdlib@go1.21.5	1.25.12
jimmidyson/configmap-reload :v0.5.0	904d08e9f701	stdlib@go1.15.7	1.25.12
quay.io/prometheus/prometheus :v2.33.5	91100b06e86d	stdlib@go1.17.8	1.25.12

Open the chart page →

4,679

k8upappuio

2.0.5

1 of 1 See more

k8up appuio 2.0.5

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
ghcr.io/k8up-io/k8up :v2.3.2	57419b6d3830	stdlib@go1.18	1.25.12

Open the chart page →

3,308

limesurveyarea-42

0.3.95

1 of 2 See more

limesurvey area-42 0.3.95

1 of the 2 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
bitnamilegacy/mariadb :12.0.2-debian-12-r0	888cdaae3cb9	stdlib@go1.25.0	1.25.12

Open the chart page →

4,802

athens-proxyathens-charts

0.17.1

1 of 1 See more

athens-proxy athens-charts 0.17.1

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
gomods/athens :v0.18.1	97cc113b34b0	stdlib@go1.24.1	1.25.12

Open the chart page →

1,299

openshift-consoleav1o-charts

0.3.6

1 of 1 See more

openshift-console av1o-charts 0.3.6

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-console :4.10.0	0bbe8b451fa3	stdlib@go1.16.9	1.25.12

Open the chart page →

9,061

prometheusavesha

19.3.0

4 of 4 See more

prometheus avesha 19.3.0

4 of the 4 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
jimmidyson/configmap-reload :v0.8.0	5af9d3041d12	stdlib@go1.19.2	1.25.12
quay.io/prometheus/node-exporter :v1.5.0	39c642b2b337	stdlib@go1.19.3	1.25.12
quay.io/prometheus/prometheus :v2.41.0	1a3e9a878e50	stdlib@go1.19.4	1.25.12
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.7.0	a15ca437f230	stdlib@go1.19.3	1.25.12

Open the chart page →

5,491

aws-calicoaws

0.3.11

1 of 1 See more

aws-calico aws 0.3.11

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
quay.io/tigera/operator :v1.20.1	379efe0c2541	stdlib@go1.15.2	1.25.12

Open the chart page →

2,250

aws-node-termination-handleraws-node-termination-handler

0.27.6

1 of 1 See more

aws-node-termination-handler aws-node-termination-handler 0.27.6

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
public.ecr.aws/aws-ec2/aws-node-termination-handler :v1.25.6	9ad31fb4e5be	stdlib@go1.25.8	1.25.12

Open the chart page →

525

snapschedulerbackube-helm-charts

3.5.0

2 of 2 See more

snapscheduler backube-helm-charts 3.5.0

2 of the 2 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
quay.io/backube/snapscheduler :3.5.0	35ac95c51780	stdlib@go1.24.3	1.25.12
quay.io/brancz/kube-rbac-proxy :v0.19.1	9f21034731c7	stdlib@go1.24.2	1.25.12

Open the chart page →

1,232

yataibentoml

1.1.13

1 of 1 See more

yatai bentoml 1.1.13

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
quay.io/bentoml/yatai :1.1.13	a5dc9d91de0d	stdlib@go1.20.7	1.25.12

Open the chart page →

1,917

yatai-deploymentbentoml

1.1.21

1 of 2 See more

yatai-deployment bentoml 1.1.21

1 of the 2 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
quay.io/bentoml/yatai-deployment :1.1.21	2342cfe8c2a9	stdlib@go1.19.13	1.25.12

Open the chart page →

1,160

boundaryboundary

0.1.0

1 of 1 See more

boundary boundary 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
hashicorp/boundary :0.21.0	37bf86488b74	stdlib@go1.25.1	1.25.12

Open the chart page →

1,445

backup-zenbzen

0.1.4

1 of 1 See more

backup-zen bzen 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
rezachalak/bzen-mongo :1.0.0	34f694325191	stdlib@go1.19.12	1.25.12

Open the chart page →

8,081

caddy-ingress-controllercaddy-ingress

1.3.0

1 of 1 See more

caddy-ingress-controller caddy-ingress 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
caddy/ingress :v0.2.1	18d1366fc0e9	stdlib@go1.21.4	1.25.12

Open the chart page →

1,891

cadvisorcadvisor

0.1.15

1 of 1 See more

cadvisor cadvisor 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
gcr.io/cadvisor/cadvisor :v0.47.2	e6c562b5e983	stdlib@go1.19.9	1.25.12

Open the chart page →

1,705

version-checkercert-manager

0.11.0

1 of 1 See more

version-checker cert-manager 0.11.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
quay.io/jetstack/version-checker :v0.11.0	eae9a374d22f	stdlib@go1.26.4	1.25.12

Open the chart page →

257

cert-managerchoerodon

1.8.2

4 of 4 See more

cert-manager choerodon 1.8.2

4 of the 4 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-cainjector :v1.8.2	c010246124c2	stdlib@go1.17.11	1.25.12
quay.io/jetstack/cert-manager-controller :v1.8.2	a20c44021a5d	stdlib@go1.17.11	1.25.12
quay.io/jetstack/cert-manager-ctl :v1.8.2	81b2d775edad	stdlib@go1.17.11	1.25.12
quay.io/jetstack/cert-manager-webhook :v1.8.2	ada7edd90bec	stdlib@go1.17.11	1.25.12

Open the chart page →

7,797

popeyechristianhuth

2.4.3

1 of 1 See more

popeye christianhuth 2.4.3

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
derailed/popeye :v0.22.1	8e68e22c7663	stdlib@go1.23.5	1.25.12

Open the chart page →

1,197

hellocloudecho

0.1.2

1 of 1 See more

hello cloudecho 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
cloudecho/hello :0.1.0	f76ede067ab9	stdlib@go1.16.6	1.25.12

Open the chart page →

1,817

cloudflare-exportercloudflare-exporter

0.2.3

1 of 1 See more

cloudflare-exporter cloudflare-exporter 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
ghcr.io/lablabs/cloudflare_exporter :0.0.16	70d74ec46602	stdlib@go1.22.3	1.25.12

Open the chart page →

791

ghostcloudpirates-ghost

0.20.22

3 of 3 See more

ghost cloudpirates-ghost 0.20.22

3 of the 3 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
library/ghost :6.63.0	e05bc1169fb2	stdlib@go1.24.6	1.25.12
library/mariadb :12.0.2	5b6a1eac15b8	stdlib@go1.18.2	1.25.12
library/mariadb :12.3.3	ab1c3dd38194	stdlib@go1.24.6	1.25.12

Open the chart page →

7,297

dumpscriptcloudscript

1.8.3

1 of 1 See more

dumpscript cloudscript 1.8.3

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
ghcr.io/cloudscript-technology/dumpscript :v0.0.42-alpine-edge	fce5b6fd161c	stdlib@go1.26.2	1.25.12

Open the chart page →

2,128

clowardenclowarden

0.2.3

2 of 4 See more

clowarden clowarden 0.2.3

2 of the 4 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
artifacthub/postgres :latest	4fd34fa635cc	stdlib@go1.24.6	1.25.12
ghcr.io/cncf/clowarden/dbmigrator :v0.2.3	c022fd42de45	stdlib@go1.25.3	1.25.12

Open the chart page →

5,651

cluster-manager-servercluster-manager-server

1.8.0

1 of 1 See more

cluster-manager-server cluster-manager-server 1.8.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/cluster-manager-server :1.8.0	364b3ff0fcb7	stdlib@go1.24.5	1.25.12

Open the chart page →

753

cluster-registrycluster-registry-controller

0.2.12

1 of 1 See more

cluster-registry cluster-registry-controller 0.2.12

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
ghcr.io/cisco-open/cluster-registry-controller :v0.2.12	937eff91df1e	stdlib@go1.18	1.25.12

Open the chart page →

1,707

coder-observabilitycoder-observability

0.7.3

14 of 21 See more

coder-observability coder-observability 0.7.3

14 of the 21 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
grafana/agent :v0.40.3	f6cbec9409be	stdlib@go1.22.1	1.25.12
grafana/grafana :10.4.19	a9043254ba16	stdlib@go1.24.3	1.25.12
grafana/loki :3.1.0	d947e68a84d9	stdlib@go1.22.2	1.25.12
grafana/loki-canary :3.1.0	39baf6d67f85	stdlib@go1.22.2	1.25.12
prom/memcached-exporter :v0.14.2	d8a61419b841	stdlib@go1.21.5	1.25.12
ghcr.io/jimmidyson/configmap-reload :v0.12.0	a7c754986900	stdlib@go1.21.1	1.25.12
quay.io/minio/mc :RELEASE.2022-09-16T09-16-47Z	546a8b52d7b0	stdlib@go1.18.6	1.25.12
quay.io/minio/minio :RELEASE.2022-09-17T00-09-45Z	c3d20bc2ea08	stdlib@go1.18.6	1.25.12
quay.io/prometheus-operator/prometheus-config-reloader :v0.74.0	d55631c7a740	stdlib@go1.22.3	1.25.12
quay.io/prometheus/alertmanager :v0.27.0	e13b6ed5cb92	stdlib@go1.21.7	1.25.12
quay.io/prometheus/node-exporter :v1.8.1	fa7fa12a57ef	stdlib@go1.22.3	1.25.12
quay.io/prometheus/prometheus :v2.53.1	f20d3127bf28	stdlib@go1.22.5	1.25.12
quay.io/prometheuscommunity/postgres-exporter :latest	ac5ec343104f	stdlib@go1.26.4	1.25.12
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.12.0	b401fae262a5	stdlib@go1.21.8	1.25.12

Open the chart page →

24,755

convertigoconvertigo

8.4.3

2 of 5 See more

convertigo convertigo 8.4.3

2 of the 5 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
baserow/baserow :1.30.1	df0c42eb67e8	stdlib@go1.21.5	1.25.12
timescale/timescaledb :latest-pg16	289d55704b1b	stdlib@go1.24.6	1.25.12

Open the chart page →

17,632

core-dump-handlercore-dump-handler

9.0.0

1 of 1 See more

core-dump-handler core-dump-handler 9.0.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
quay.io/icdh/core-dump-handler :v9.0.0	cc79b9e2a1c8	stdlib@go1.16.6	1.25.12

Open the chart page →

3,088

cosmocosmo-platform

0.20.0

6 of 10 See more

cosmo cosmo-platform 0.20.0

6 of the 10 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
bitnamilegacy/minio :2025.7.23-debian-12-r5	6dabb4a2088c	stdlib@go1.24.6	1.25.12
bitnamilegacy/redis :7.2.4-debian-12-r16	70cafc5a71e8	stdlib@go1.21.10	1.25.12
ghcr.io/wundergraph/cosmo/controlplane :0.133.1	49800ff775f3	stdlib@go1.22.3	1.25.12
ghcr.io/wundergraph/cosmo/graphqlmetrics :0.33.0	efb69ec3330c	stdlib@go1.23.6	1.25.12
ghcr.io/wundergraph/cosmo/otelcollector :0.18.1	5a6fe78d4d15	stdlib@go1.23.6	1.25.12
ghcr.io/wundergraph/cosmo/studio :0.111.0	454f4384713a	stdlib@go1.20.7	1.25.12

Open the chart page →

29,096

crossviewcrossview

4.6.0

1 of 2 See more

crossview crossview 4.6.0

1 of the 2 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
library/postgres :latest	4ef4dbc939d6	stdlib@go1.24.6	1.25.12

Open the chart page →

1,832

dapr-dashboarddapr

0.15.0

1 of 1 See more

dapr-dashboard dapr 0.15.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
daprio/dashboard :0.15.0	4be696707bd1	stdlib@go1.21.13	1.25.12

Open the chart page →

1,310

hoppscotchdeliveryhero

0.3.2

1 of 1 See more

hoppscotch deliveryhero 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
hoppscotch/hoppscotch :2024.8.2	f1da831950b7	stdlib@go1.21.10	1.25.12

Open the chart page →

3,461

kube-benchdeliveryhero

0.1.17

1 of 1 See more

kube-bench deliveryhero 0.1.17

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
aquasec/kube-bench :v0.8.0	ea3e33bc3c4e	stdlib@go1.21.7	1.25.12

Open the chart page →

1,624

listmonkdeliveryhero

0.1.12

1 of 1 See more

listmonk deliveryhero 0.1.12

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
listmonk/listmonk :v2.1.0	d2eac77ddfad	stdlib@go1.17.6	1.25.12

Open the chart page →

2,537

prometheus-locust-exporterdeliveryhero

1.2.3

1 of 1 See more

prometheus-locust-exporter deliveryhero 1.2.3

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
containersol/locust_exporter :v0.4.1	a914972d19ad	stdlib@go1.15.8	1.25.12

Open the chart page →

1,276

zabbix-kubernetes-discoverydjerfy

1.4.20

1 of 1 See more

zabbix-kubernetes-discovery djerfy 1.4.20

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container image	Digest	Package	Fixed in
ghcr.io/djerfy/zabbix-kubernetes-discovery :v1.4.20	7a50c07e7c69	stdlib@go1.23.1	1.25.12

Open the chart page →

4,220

Container images carrying it

4,886 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
nocodb/nocodb :0.84.15	f9b799933aa8	stdlib@go1.17.8	1.25.12	1
noooste/garage-ui :v0.12.1	0b68a9237da6	stdlib@go1.26.0	1.25.12	1
nousresearch/hermes-agent :v2026.8.27	e0df6adebddf	stdlib@go1.24.4	1.25.12	1
novosga/novosga :latest	34b9acbe6e51	stdlib@go1.26.2	1.25.12	1
nsqio/nsq :v1.3.0	1a369c146af7	stdlib@go1.21.5	1.25.12	1
ntakashi/cole :1.2.3	f7b68bee2a68	stdlib@go1.20.11	1.25.12	1
ntakashi/gitana :1.4.0	4171ec641120	stdlib@go1.17.7	1.25.12	1
nvidia/dcgm-exporter :2.2.9-2.4.1-ubuntu20.04	91b20b66d1cd	stdlib@go1.14.2	1.25.12	1
oamdev/cluster-gateway-addon-manager :v1.4.0	1bcae00bd7b0	stdlib@go1.17.10	1.25.12	1
obolnetwork/charon-dkg-sidecar :main	e263be0a7440	stdlib@go1.25.3	1.25.12	1
odavid/my-bloody-jenkins :2.462.3-306	e7ab3bbc948e	stdlib@go1.22.5	1.25.12	1
ofekmeister/csi-gcs :v0.9.0	30d70fa9211b	stdlib@go1.18.2	1.25.12	1
offchainlabs/nitro-node :v3.7.6-c0fe95e	9f779fa84b7b	stdlib@go1.24.5	1.25.12	1
offchainlabs/nitro-node :v3.1.0-7d1d84c	e95865866129	stdlib@go1.21.10	1.25.12	1
okgolove/asprom :1.10.1	974d2e5eb150	stdlib@go1.14.11	1.25.12	1
okteto/civo-webhook :0.5.3	57cd51176538	stdlib@go1.21.3	1.25.12	1
oliver006/redis_exporter :v1.11.1	04d958d209ab	stdlib@go1.15	1.25.12	1
oliver006/redis_exporter :v1.67.0	120f7ec77293	stdlib@go1.23.4	1.25.12	1
oliver006/redis_exporter :v1.14.0	d55e056987af	stdlib@go1.15.6	1.25.12	1
oliver006/redis_exporter :v1.66.0	d98e6db8094f	stdlib@go1.23.2	1.25.12	1
oliver006/redis_exporter :v1.82.0-alpine	da9e89ee4e75	stdlib@go1.26.1	1.25.12	1
olliai/exposecontroller :1.0.5	a470d96525e4	stdlib@go1.16.3	1.25.12	1
olliai/k8s-replicator :1.3.0	5716f2a8bd4c	stdlib@go1.17.2	1.25.12	1
ondrejsika/counter :latest	d95eaeee2172	stdlib@go1.26.2	1.25.12	1
opea/codegen-ui :1.0	2bee4eb66f3e	stdlib@go1.20.7	1.25.12	1
opea/codetrans-ui :1.0	3ef121f34610	stdlib@go1.20.12	1.25.12	1
opea/docsum-ui :1.0	7f854e9bffaf	stdlib@go1.20.12	1.25.12	1
opea/gmcmanager :1.0	514af17c495c	stdlib@go1.21.13	1.25.12	1
openbas/caldera-server :5.1.0	a277796d9724	stdlib@go1.19.8	1.25.12	1
opencloudeu/opencloud :7.2.4	6d992ccc5f1c	stdlib@go1.25.11	1.25.12	1
opencord/onos-classic-helm-utils :0.1.0	0d693ba85fd6	stdlib@go1.16.5	1.25.12	1
opencsghq/agenticflow :ee-v0.6.5-2	41cba9c366f1	stdlib@go1.19.8	1.25.12	1
opencsghq/csgbot :v0.6.9-ee	7d0271e26521	stdlib@go1.24.4	1.25.12	1
opencsghq/csghub-portal :v2.5.0-ee	1cb36b49151e	stdlib@go1.23.3	1.25.12	1
opencsghq/csghub-server :v2.5.0-ee	587046575c2c	stdlib@go1.26.0	1.25.12	1
opencsghq/csghub-xnet :v2.5.0-ee	86ea22f495c7	stdlib@go1.24.10	1.25.12	1
opencsghq/gitlab-gitaly :v17.5.0	bdd2c58b9744	stdlib@go1.22.7	1.25.12	1
opencsghq/gitlab-shell :v19.2.5	80a65ac370da	stdlib@go1.26.4	1.25.12	1
opencsghq/kube-state-metrics :v2.19.1	5ea147562ec8	stdlib@go1.26.4	1.25.12	1
opencsghq/lws :v0.6.1	de15437db41b	stdlib@go1.24.0	1.25.12	1
opencsghq/prometheus :v3.13.0	0aac0d04749e	stdlib@go1.26.4	1.25.12	1
opencsghq/prometheus-config-reloader :v0.92.1	44e6ec00729b	stdlib@go1.26.4	1.25.12	1
opendatacube/explorer :latest	120457ffcd69	stdlib@go1.22.2	1.25.12	1
openebs/lvm-driver :1.10.1	41f73aba7f31	stdlib@go1.24.7	1.25.12	1
openebs/provisioner-nfs :0.11.0	4f41dd782761	stdlib@go1.19.13	1.25.12	1
openebs/zfs-driver :2.11.1	16f1a74bb249	stdlib@go1.26.2	1.25.12	1
openenergyprojects/modbus_exporter :20230617_a144551	58990f24fb25	stdlib@go1.20.5	1.25.12	1
openfga/openfga :v1.18.0	36097b960f66	stdlib@go1.26.4	1.25.12	1
openfga/openfga :v1.9.2	5e94966c11df	stdlib@go1.24.5	1.25.12	1
openkruise/agent-sandbox-controller :v0.3.0	e0a3bf7c0dc5	stdlib@go1.25.10	1.25.12	1