StackRadar

CVE-2026-39822

Unscored

Advisory

Published 7 Jul 2026In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
base score, highest
EPSS
0.002
14th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
4,362
of 17,828 indexed, latest versions
Container images
5,035
deployed by those charts
Fix available
1 of 1
affected package

Root escape via symlink plus trailing slash in os

Carried by container images the latest versions of 4,362 of 17,828 indexed charts deploy, on 5,035 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+189 more1.25.125,035
OSV records
GO-2026-4970
Also known as
BIT-golang-2026-39822

Charts affected

4,362 by stars
ChartLatestAffected imagesRadar Score
pumperlypumperlyVerified publisher0.1.21 of 3See more

pumperly pumperly 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
postgis/postgis:17-3.4-alpine5a1dbedac34e
stdlib@go1.18.2
1.25.12

Open the chart page →

2,860
game-serverpvillaverdeVerified publisher1.0.61 of 1See more

game-server pvillaverde 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/itzg/minecraft-server:latest46919d151d39
stdlib@go1.24.6
1.25.12

Open the chart page →

4,323
cdmswebapppyalive-cdmswebappVerified publisher0.1.02 of 3See more

cdmswebapp pyalive-cdmswebapp 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
stdlib@go1.18.2
1.25.12
sarwansharma/minio:v359d1da9385d1
stdlib@go1.18.3
1.25.12

Open the chart page →

6,707
loki-stackpyalive-cdmswebappVerified publisher2.6.53 of 4See more

loki-stack pyalive-cdmswebapp 2.6.5

3 of the 4 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
grafana/grafana:latestac461fb352ab
stdlib@go1.26.4
1.25.12
grafana/loki:2.5.0f9ef133793af
stdlib@go1.17.8
1.25.12
grafana/promtail:2.4.2626900031c4e
stdlib@go1.17.2
1.25.12

Open the chart page →

6,441
rancher-metricspy-kube-downscalerVerified publisher0.0.81 of 4See more

rancher-metrics py-kube-downscaler 0.0.8

1 of the 4 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/eumel8/rancher-servicemonitor:0.2.1f34428cac187
stdlib@go1.22.1
1.25.12

Open the chart page →

639
qantas-apiqantas-helm0.1.01 of 3See more

qantas-api qantas-helm 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
library/postgres:1767f41722b7a8
stdlib@go1.24.6
1.25.12

Open the chart page →

1,696
open-terminalqaoruVerified publisher0.2.41 of 1See more

open-terminal qaoru 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/open-webui/open-terminal:0.13.0-slimdec44673c865
stdlib@go1.24.4
1.25.12

Open the chart page →

2,090
unifiqaoruVerified publisher1.1.41 of 2See more

unifi qaoru 1.1.4

1 of the 2 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
library/mongo:7.0-jammy84c4a18b60a0
stdlib@go1.24.6
1.25.12

Open the chart page →

3,466
cf-operatorquarks2.3.0+0.g27a91cdf2 of 2See more

cf-operator quarks 2.3.0+0.g27a91cdf

2 of the 2 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
cfcontainerization/cf-operator:v2.3.0-0.g27a91cdf82fa261c18a8
stdlib@go1.13.3
1.25.12
cfcontainerization/quarks-job:v0.0.0-0.g70ae34b58fb1c173a46
stdlib@go1.13.4
1.25.12

Open the chart page →

11,974
quarksquarks7.0.1+0.g5396b114 of 5See more

quarks quarks 7.0.1+0.g5396b11

4 of the 5 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/cloudfoundry-incubator/quarks-job:v1.0.213760eee87f839
stdlib@go1.14.7
1.25.12
ghcr.io/cloudfoundry-incubator/quarks-operator:v7.0.1-0.g5396b116a1432b0d503
stdlib@go1.13.15
1.25.12
ghcr.io/cloudfoundry-incubator/quarks-secret:v1.0.754f059af4de8ed
stdlib@go1.14.7
1.25.12
ghcr.io/cloudfoundry-incubator/quarks-statefulset:v0.0.1308-g6a8b2220e24a9e0a21b6
stdlib@go1.14.7
1.25.12

Open the chart page →

18,205
quarks-statefulsetquarks0.0.1304-g4b4f2ac51 of 1See more

quarks-statefulset quarks 0.0.1304-g4b4f2ac5

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/cloudfoundry-incubator/quarks-statefulset:v0.0.1304-g4b4f2ac5c7c70b527255
stdlib@go1.14.7
1.25.12

Open the chart page →

4,012
qubivaqubiva0.3.21 of 3See more

qubiva qubiva 0.3.2

1 of the 3 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
grafana/loki:3.3.28af2de1abbdd
stdlib@go1.23.4
1.25.12

Open the chart page →

4,545
ingress-controllerqumine0.8.5001 of 1See more

ingress-controller qumine 0.8.500

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
qumine/ingress-controller:v0.8.5f2c8a2148381
stdlib@go1.19
1.25.12

Open the chart page →

1,534
cupsr2dlan-helm-chartsVerified publisher0.1.01 of 1See more

cups r2dlan-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
anujdatar/cups:25.07.01685df04a643b
stdlib@go1.19.8
1.25.12

Open the chart page →

7,810
rabbitpingrabbitping1.3.01 of 1See more

rabbitping rabbitping 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
udhos/rabbitping:1.3.0474c467bbf42
stdlib@go1.24.3
1.25.12

Open the chart page →

1,149
kubemirrorraczylo-comVerified publisher0.9.221 of 1See more

kubemirror raczylo-com 0.9.22

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/lukaszraczylo/kubemirror:0.9.2265f266df3289
stdlib@go1.26.4
1.25.12

Open the chart page →

74
rada-platformrada-platform0.1.02 of 7See more

rada-platform rada-platform 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
apache/airflow:2.10.2-python3.9ce90bdc3d2af
stdlib@go1.22.7
1.25.12
registry.k8s.io/git-sync/git-sync:v3.6.96fa9042f6128
stdlib@go1.20.6
1.25.12

Open the chart page →

21,430
cloudnative-pgradar-baseVerified publisher0.23.21 of 1See more

cloudnative-pg radar-base 0.23.2

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/cloudnative-pg/cloudnative-pg:1.25.1b5210df46c05
stdlib@go1.24.0
1.25.12

Open the chart page →

856
headlampradar-baseVerified publisher1.0.01 of 1See more

headlamp radar-base 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/headlamp-k8s/headlamp:v0.43.05d03caa26df7
stdlib@go1.26.3
1.25.12

Open the chart page →

657
hydraradar-baseVerified publisher0.48.01 of 1See more

hydra radar-base 0.48.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
oryd/hydra:v2.2.02c93beb5e5f2
stdlib@go1.21.5
1.25.12

Open the chart page →

1,542
kratosradar-baseVerified publisher0.43.11 of 1See more

kratos radar-base 0.43.1

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
oryd/kratos:v1.1.08f15006a080d
stdlib@go1.21.5
1.25.12

Open the chart page →

1,794
kubecostradar-baseVerified publisher1.0.03 of 7See more

kubecost radar-base 1.0.0

3 of the 7 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
grafana/grafana:11.4.0d8ea37798ccc
stdlib@go1.23.1
1.25.12
gcr.io/kubecost1/cost-model:prod-2.6.39e507ac0aebb
stdlib@go1.23.4
1.25.12
quay.io/prometheus/prometheus:v3.2.05888c188cf09
stdlib@go1.23.6
1.25.12

Open the chart page →

9,639
management-portalradar-baseVerified publisher1.7.01 of 1See more

management-portal radar-base 1.7.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/radar-base/managementportal/management-portal:3.0.0c1b37e821f72
stdlib@go1.26.2
1.25.12

Open the chart page →

3,288
nginx-gateway-fabricradar-baseVerified publisher2.6.61 of 1See more

nginx-gateway-fabric radar-base 2.6.6

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/nginx/nginx-gateway-fabric:2.6.6c10f734589e9
stdlib@go1.26.4
1.25.12

Open the chart page →

132
nifikopradar-baseVerified publisher1.14.11 of 1See more

nifikop radar-base 1.14.1

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/konpyutaika/docker-images/nifikop:v1.14.1-release6bb00c592a82
stdlib@go1.24.4
1.25.12

Open the chart page →

512
radar-grafanaradar-baseVerified publisher0.1.41 of 2See more

radar-grafana radar-base 0.1.4

1 of the 2 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
grafana/grafana:11.6.062d2b9d20a19
stdlib@go1.23.7
1.25.12

Open the chart page →

1,840
radar-hydraradar-baseVerified publisher0.3.41 of 2See more

radar-hydra radar-base 0.3.4

1 of the 2 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
oryd/hydra:v2.3.0b94007e19a1f
stdlib@go1.23.4
1.25.12

Open the chart page →

2,199
radar-kratosradar-baseVerified publisher0.1.51 of 1See more

radar-kratos radar-base 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
oryd/kratos:v1.3.1fe2428f103a6
stdlib@go1.23.2
1.25.12

Open the chart page →

1,579
radar-nifiradar-baseVerified publisher3.1.01 of 1See more

radar-nifi radar-base 3.1.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/konpyutaika/docker-images/nifikop:v1.14.1-release6bb00c592a82
stdlib@go1.24.4
1.25.12

Open the chart page →

512
radar-redisradar-baseVerified publisher1.3.01 of 1See more

radar-redis radar-base 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
quay.io/opstree/redis-operator:v0.22.2464ac61a6eb4
stdlib@go1.23.12
1.25.12

Open the chart page →

412
redis-operatorradar-baseVerified publisher0.22.21 of 1See more

redis-operator radar-base 0.22.2

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
quay.io/opstree/redis-operator:v0.22.2464ac61a6eb4
stdlib@go1.23.12
1.25.12

Open the chart page →

412
rancher-auto-registerrancher-auto-registerVerified publisher0.1.01 of 1See more

rancher-auto-register rancher-auto-register 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
registry.gitlab.com/xrow-public/ci-tools/tools:main9b9d1ed86b6a
stdlib@go1.26.4
1.25.12

Open the chart page →

1,965
pagesranjinigogga1.0.01 of 3See more

pages ranjinigogga 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.25.12

Open the chart page →

20,350
raven_profilerraven-profilerVerified publisher0.1.621 of 1See more

raven_profiler raven-profiler 0.1.62

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
public.ecr.aws/t0u0d5o5/ecr_authenticator:latest077e4e57e41c
stdlib@go1.21.5
1.25.12

Open the chart page →

1,301
rawfile-localpvrawfile0.15.35 of 6See more

rawfile-localpv rawfile 0.15.3

5 of the 6 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.17.0f9de845b1701
stdlib@go1.26.3
1.25.12
registry.k8s.io/sig-storage/csi-provisioner:v6.3.0a4b0b1a37605
stdlib@go1.26.3
1.25.12
registry.k8s.io/sig-storage/csi-resizer:v2.2.1ea1d25e23479
stdlib@go1.26.3
1.25.12
registry.k8s.io/sig-storage/csi-snapshotter:v8.6.042af0929bcd6
stdlib@go1.26.3
1.25.12
registry.k8s.io/sig-storage/snapshot-controller:v8.6.081e79f205083
stdlib@go1.26.3
1.25.12

Open the chart page →

2,836
aws-ec2-runtime-checkerrayselfs-chartsVerified publisher0.1.41 of 1See more

aws-ec2-runtime-checker rayselfs-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
rayselfs/aws-ec2-runtime-checker:v0.1.5562e5b2f81ce
stdlib@go1.24.11
1.25.12

Open the chart page →

292
thanosrayselfs-chartsVerified publisher0.1.51 of 1See more

thanos rayselfs-charts 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.40.1aae7b2b030ed
stdlib@go1.25.3
1.25.12

Open the chart page →

767
saleorrc-helm-charts0.1.11 of 5See more

saleor rc-helm-charts 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:1.22.0ca6b73330616
stdlib@go1.15.8
1.25.12

Open the chart page →

3,747
pagesrebecca-pages1.0.01 of 3See more

pages rebecca-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.25.12

Open the chart page →

20,350
recipe-apprecipe-app0.1.01 of 2See more

recipe-app recipe-app 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
anamskenneth/recipe_frontend:2025-06-079ecf04f42cc3
stdlib@go1.20.12
1.25.12

Open the chart page →

3,575
helm-redchefredchef0.1.01 of 3See more

helm-redchef redchef 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
sharanalwar/redchef-frontend:latest5e82950b16b7
stdlib@go1.23.7
1.25.12

Open the chart page →

4,983
ansible-automation-platformredhat-cop0.0.91 of 1See more

ansible-automation-platform redhat-cop 0.0.9

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.7464a3af4dfe0
stdlib@go1.15.14
1.25.12

Open the chart page →

15,300
argocd-operatorredhat-cop1.2.21 of 1See more

argocd-operator redhat-cop 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.7464a3af4dfe0
stdlib@go1.15.14
1.25.12

Open the chart page →

15,300
ploigosredhat-cop0.0.91 of 2See more

ploigos redhat-cop 0.0.9

1 of the 2 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.66722d5041b47
stdlib@go1.15.14
1.25.12

Open the chart page →

11,455
sonatype-nexusredhat-cop1.1.131 of 2See more

sonatype-nexus redhat-cop 1.1.13

1 of the 2 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
quay.io/openshift/origin-jenkins-agent-base:latestc241c971aef8
stdlib@go1.21.3
1.25.12

Open the chart page →

16,389
stackrox-chartredhat-cop0.0.101 of 1See more

stackrox-chart redhat-cop 0.0.10

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
stdlib@go1.16
1.25.12

Open the chart page →

29,599
redirectorredirectorVerified publisher0.0.31 of 1See more

redirector redirector 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/chilledornaments/redirector:latest94d48447d967
stdlib@go1.26.4
1.25.12

Open the chart page →

74
redisredis-arm17.8.01 of 1See more

redis redis-arm 17.8.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/zcube/bitnami-compat/redis:7.0-debian-11-r55118a403046f7
stdlib@go1.19.4
1.25.12

Open the chart page →

1,907
redis-enforce-expireredis-enforce-expire1.0.01 of 1See more

redis-enforce-expire redis-enforce-expire 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
udhos/redis-enforce-expire:1.0.0615b6a7d742e
stdlib@go1.26.1
1.25.12

Open the chart page →

1,297
registry-credsregistry-creds0.2.31 of 1See more

registry-creds registry-creds 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/alexellis/registry-creds:0.3.2-rc1f5c72501e559
stdlib@go1.19.5
1.25.12

Open the chart page →

1,043

Container images carrying it

5,035 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/open-cluster-management/cluster-proxy:v0.12.035f9c3ad644a
stdlib@go1.22.4
1.25.12
1
quay.io/open-cluster-management/dynamic-scoring-addon:latest7e571a08ec1a
stdlib@go1.24.13
1.25.12
1
quay.io/open-cluster-management/dynamic-scoring-controller:latest587f5bc8f2ed
stdlib@go1.24.13
1.25.12
1
quay.io/open-cluster-management/kueue-addon:v0.1.47f728514fead
stdlib@go1.24.6
1.25.12
1
quay.io/open-cluster-management/multicluster-controlplane:latest9888240f644b
stdlib@go1.26.4
1.25.12
1
quay.io/open-cluster-management/multicluster-mesh-addon:latest3e010e1188f1
stdlib@go1.19.13
1.25.12
1
quay.io/openshift/origin-cli:4.66722d5041b47
stdlib@go1.15.14
1.25.12
1
quay.io/openshift/origin-console:4.10.00bbe8b451fa3
stdlib@go1.16.9
1.25.12
1
quay.io/openshift/origin-jenkins-agent-base:latestc241c971aef8
stdlib@go1.21.3
1.25.12
1
quay.io/operator-framework/catalogd:v1.8.06ff40fa6257f
stdlib@go1.25.3
1.25.12
1
quay.io/operator-framework/olm1b6002156f56
stdlib@go1.21.7
1.25.12
1
quay.io/operator-framework/olm40d0363f4aa6
stdlib@go1.22.3
1.25.12
1
quay.io/operator-framework/olm:v0.46.04404599eb7b7
stdlib@go1.26.3
1.25.12
1
quay.io/operator-framework/olmf9ea8cef95ac
stdlib@go1.19.6
1.25.12
1
quay.io/operator-framework/operator-controller:v1.8.0bca5dfcc67ca
stdlib@go1.25.3
1.25.12
1
quay.io/opsmxpublic/awsgit:v2-openssh0d21ba756f44
stdlib@go1.17.2
1.25.12
1
quay.io/opsmxpublic/awsgit:v3-js15a6faada3d4
stdlib@go1.16.15
1.25.12
1
quay.io/opsmxpublic/create-secret:v4.0.4defc3263e0e9
stdlib@go1.20.3
1.25.12
1
quay.io/opsmxpublic/forwarder-controller:v3.5.7f0c5bebaec96
stdlib@go1.19.1
1.25.12
1
quay.io/opsmxpublic/opa:opa-sidecar-v1.03dcbf3caa454
stdlib@go1.24.11
1.25.12
1
quay.io/opsmxpublic/opa:1.12.084fb1af7401c
stdlib@go1.25.5
1.25.12
1
quay.io/opsmxpublic/rabbitmq:4.2-management3408107e5cc4
stdlib@go1.22.2
1.25.12
1
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
stdlib@go1.13.1
1.25.12
1
quay.io/opstree/druid-exporter:v0.83f6d9885cfe2
stdlib@go1.14.6
1.25.12
1
quay.io/opstree/druid-exporter:v0.119f01c9c5c2e3
stdlib@go1.15.15
1.25.12
1
quay.io/opstree/grafana:12.4.3b61c1ed2f015
stdlib@go1.26.2
1.25.12
1
quay.io/opstree/kube-state-metrics:2.18.0-debian1353525d253793
stdlib@go1.25.9
1.25.12
1
quay.io/opstree/logging-operator:v0.4.0fd8bb57ef3cf
stdlib@go1.17.10
1.25.12
1
quay.io/opstree/loki:3.6-debian13bdfee214c7ea
stdlib@go1.26.2
1.25.12
1
quay.io/opstree/memcached-exporter:0.15.5-debian13cf8f8410eaad
stdlib@go1.26.2
1.25.12
1
quay.io/opstree/mongodb-operator:v0.3.0879b9bead838
stdlib@go1.17.8
1.25.12
1
quay.io/opstree/node-exporter:1.11.1-alpine3.233b6b3a7eb001
stdlib@go1.26.2
1.25.12
1
quay.io/opstree/opentelemetry-operator:0.149.0-debian13a21405ab9a9a
stdlib@go1.25.9
1.25.12
1
quay.io/opstree/tempo:2.10.4-debian13cb734024b3fd
stdlib@go1.26.2
1.25.12
1
quay.io/opstree/victoriametrics-operator:v0.69.066fe5216c278
stdlib@go1.26.2
1.25.12
1
quay.io/orc/openstack-resource-controller:v2.5.079f22af49612
stdlib@go1.25.9
1.25.12
1
quay.io/piraeusdatastore/nri-volume-qos:v0.1.3cbe3e1ea2b6a
stdlib@go1.26.4
1.25.12
1
quay.io/piraeusdatastore/piraeus-operator:v2.10.5dd68a66332de
stdlib@go1.26.1
1.25.12
1
quay.io/piraeusdatastore/piraeus-operator:v2.2.0ec4022c8b0e3
stdlib@go1.18.10
1.25.12
1
quay.io/projectquay/clair:4.9.023329c3368e4
stdlib@go1.24.11
1.25.12
1
quay.io/projectquay/clair:4.7.28d38ffa8fad7
stdlib@go1.20.9
1.25.12
1
quay.io/prometheus/alertmanager:v0.24.0088464f949de
stdlib@go1.17.8
1.25.12
1
quay.io/prometheus/alertmanager:v0.32.058e117eabcce
stdlib@go1.26.2
1.25.12
1
quay.io/prometheus/alertmanager:v0.31.188b605de9aba
stdlib@go1.25.7
1.25.12
1
quay.io/prometheuscommunity/elasticsearch-exporter:v1.8.0073dd360de2c
stdlib@go1.22.7
1.25.12
1
quay.io/prometheuscommunity/elasticsearch-exporter:v1.5.013a41e8ac836
stdlib@go1.18.4
1.25.12
1
quay.io/prometheuscommunity/pgbouncer-exporter:v0.12.130f31b6c2efd
stdlib@go1.26.4
1.25.12
1
quay.io/prometheuscommunity/postgres-exporter:latestac5ec343104f
stdlib@go1.26.4
1.25.12
1
quay.io/prometheuscommunity/postgres-exporter:v0.19.1e96064f87622
stdlib@go1.25.7
1.25.12
1
quay.io/prometheuscommunity/smartctl-exporter:v0.14.0cfe22c36d7d2
stdlib@go1.23.7
1.25.12
1

syft 1.42.1 · advisories as of 22 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.