StackRadar

CVE-2026-39822

Unscored

Advisory

Published 7 Jul 2026In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.002
14th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
4,226
of 17,790 indexed, latest versions
Container images
4,913
deployed by those charts
Fix available
1 of 1
affected package

Root escape via symlink plus trailing slash in os

Carried by container images the latest versions of 4,226 of 17,790 indexed charts deploy, on 4,913 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+186 more1.25.124,913
OSV records
GO-2026-4970
Also known as
BIT-golang-2026-39822

Charts affected

4,226 by stars
ChartLatestAffected imagesRadar Score
newtjeffrescVerified publisher0.2.11 of 1See more

newt jeffresc 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
fosrl/newt:1.10.4ccd2b0e9a049
stdlib@go1.25.8
1.25.12

Open the chart page →

1,104
athens-proxyjenkins-x0.2.21 of 2See more

athens-proxy jenkins-x 0.2.2

1 of the 2 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:latestab6f1a1f0fb4
stdlib@go1.25.4
1.25.12

Open the chart page →

1,344
jx-app-athensjenkins-x0.0.181 of 1See more

jx-app-athens jenkins-x 0.0.18

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
gomods/athens:v0.8.1d714c7ff0231
stdlib@go1.13.4
1.25.12

Open the chart page →

4,232
jx-app-datadogjenkins-x0.0.101 of 2See more

jx-app-datadog jenkins-x 0.0.10

1 of the 2 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
datadog/agent:6aad9994de6a7
stdlib@go1.21.11
1.25.12

Open the chart page →

4,052
jx-app-flaggerjenkins-x0.0.52 of 2See more

jx-app-flagger jenkins-x 0.0.5

2 of the 2 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
grafana/grafana:6.5.1befcd84da2c1
stdlib@go1.13.1
1.25.12
weaveworks/flagger:1.0.0-rc.5174307de1b36
stdlib@go1.14.2
1.25.12

Open the chart page →

6,035
jx-app-jenkinsjenkins-x0.0.151 of 2See more

jx-app-jenkins jenkins-x 0.0.15

1 of the 2 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
stdlib@go1.25.3
1.25.12

Open the chart page →

2,498
knative-servingjenkins-x0.19.124 of 4See more

knative-serving jenkins-x 0.19.12

4 of the 4 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/serving/cmd/activatordigest-pinned1e3db4f2eeed
stdlib@go1.14.10
1.25.12
gcr.io/knative-releases/knative.dev/serving/cmd/autoscalerdigest-pinneddb6ceff2aab4
stdlib@go1.14.10
1.25.12
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinnedb2cd45b8a8a4
stdlib@go1.14.10
1.25.12
gcr.io/knative-releases/knative.dev/serving/cmd/webhookdigest-pinnedd27b4495ccc3
stdlib@go1.14.10
1.25.12

Open the chart page →

9,724
jetspotterjetspotter1.48.11 of 1See more

jetspotter jetspotter 1.48.1

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/vvanouytsel/jetspotter:1.48.1ec0e17a94f61
stdlib@go1.23.12
1.25.12

Open the chart page →

990
ingress-nginxjfrog4.5.22 of 2See more

ingress-nginx jfrog 4.5.2

2 of the 2 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.6.415be4666c530
stdlib@go1.19.4
1.25.12
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20220916-gd32f8c34339c5b2e3310d
stdlib@go1.19.1
1.25.12

Open the chart page →

3,798
vaultjfrog0.25.02 of 2See more

vault jfrog 0.25.0

2 of the 2 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
hashicorp/vault:1.14.0b2177a8bfe85
stdlib@go1.20.5
1.25.12
hashicorp/vault-k8s:1.2.14500e988b7ce
stdlib@go1.20.3
1.25.12

Open the chart page →

3,977
alpine-torjfwenischVerified publisher1.1.01 of 1See more

alpine-tor jfwenisch 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
jfwenisch/alpine-tor:latest9e6c229f953c
stdlib@go1.14.6
1.25.12

Open the chart page →

4,461
kafka-offset-lag-for-prometheusjhidalgo3-githubVerified publisher2.3.01 of 1See more

kafka-offset-lag-for-prometheus jhidalgo3-github 2.3.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
jhidalgo3/kafka-offset-lag-for-prometheus:latest0390e155c46d
stdlib@go1.17.13
1.25.12

Open the chart page →

1,470
missing-container-metricsjimdo-missing-container-metrics0.5.01 of 1See more

missing-container-metrics jimdo-missing-container-metrics 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
dmilhdef/missing-container-metrics:v0.21.0fada1a6e7638
stdlib@go1.16.2
1.25.12

Open the chart page →

2,418
job-manager-syncerjob-manager-syncer1.27.01 of 1See more

job-manager-syncer job-manager-syncer 1.27.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/job-manager-syncer:1.27.086957bbeeff5
stdlib@go1.23.12
1.25.12

Open the chart page →

462
job-pod-reaperjob-pod-reaper0.14.01 of 1See more

job-pod-reaper job-pod-reaper 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
quay.io/ohiosupercomputercenter/job-pod-reaper:v0.14.0775449888968
stdlib@go1.26.4
1.25.12

Open the chart page →

74
haven-complinacy-dashboardjolle-devVerified publisher1.0.01 of 2See more

haven-complinacy-dashboard jolle-dev 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
j0113/haven-compliancy-dashboard:1.3696cb8ca9f4e
stdlib@go1.17.2
1.25.12

Open the chart page →

3,842
cloudnative-pgjouveVerified publisher0.27.01 of 1See more

cloudnative-pg jouve 0.27.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/cloudnative-pg/cloudnative-pg:1.28.034198e85b6e6
stdlib@go1.25.5
1.25.12

Open the chart page →

653
corednsjouveVerified publisher1.45.01 of 1See more

coredns jouve 1.45.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
coredns/coredns:1.13.19b9128672209
stdlib@go1.25.2
1.25.12

Open the chart page →

894
distributionjouveVerified publisher0.2.31 of 1See more

distribution jouve 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
distribution/distribution:3.1.1bca24727f400
stdlib@go1.25.9
1.25.12

Open the chart page →

842
image-storage-servicejtektVerified publisher0.4.31 of 4See more

image-storage-service jtekt 0.4.3

1 of the 4 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:6.0.10-debian-11-r842319decb591
stdlib@go1.19.12
1.25.12

Open the chart page →

22,728
time-series-storagejtektVerified publisher0.1.101 of 2See more

time-series-storage jtekt 0.1.10

1 of the 2 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
bitnamilegacy/influxdb:2.6.1-debian-11-r18d17df1f9d745
stdlib@go1.19.6
1.25.12

Open the chart page →

16,680
firstchartjuanjmerono0.2.01 of 1See more

firstchart juanjmerono 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
jmalloc/echo-server:0.3.1e4eaee2c7998
stdlib@go1.17
1.25.12

Open the chart page →

1,443
alertmanager-irc-relayjuppi880.0.11 of 1See more

alertmanager-irc-relay juppi88 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
maldridge/alertmanager-irc-relay:v0.4.1391de2b76128
stdlib@go1.16.4
1.25.12

Open the chart page →

1,615
nginx-gateway-fabricjupyter-jscVerified publisher2.4.11 of 1See more

nginx-gateway-fabric jupyter-jsc 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/nginx/nginx-gateway-fabric:2.4.180f3a0a51af5
stdlib@go1.25.7
1.25.12

Open the chart page →

365
k10appk10app0.2.11 of 11See more

k10app k10app 0.2.1

1 of the 11 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/k10app/businit:latest94c9a3e799c2
stdlib@go1.19.3
1.25.12

Open the chart page →

10,570
k8-ldap-configmapk8-ldap-configmap0.16.01 of 1See more

k8-ldap-configmap k8-ldap-configmap 0.16.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
quay.io/ohiosupercomputercenter/k8-ldap-configmap:v0.16.040d0b67afd77
stdlib@go1.26.4
1.25.12

Open the chart page →

96
k8-namespace-reaperk8-namespace-reaper0.11.01 of 1See more

k8-namespace-reaper k8-namespace-reaper 0.11.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
quay.io/ohiosupercomputercenter/k8-namespace-reaper:v0.11.0ead1f817e8c2
stdlib@go1.26.4
1.25.12

Open the chart page →

74
k8quk8qu1.4.01 of 1See more

k8qu k8qu 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/gijsvandulmen/k8qu:1.4e897b18db13d
stdlib@go1.22.6
1.25.12

Open the chart page →

568
clonarrk8s-chartsVerified publisher0.10.11 of 1See more

clonarr k8s-charts 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/prophetse7en/clonarr:latest9400d298b37a
stdlib@go1.26.4
1.25.12

Open the chart page →

439
deltabadgerk8s-chartsVerified publisher2.0.01 of 1See more

deltabadger k8s-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/deltabadger/deltabadger:2.23.3bffe3c22fabc
stdlib@go1.24.4
1.25.12

Open the chart page →

5,691
palworld-serverk8s-chartsVerified publisher1.2.11 of 1See more

palworld-server k8s-charts 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
thijsvanloef/palworld-server-docker:v2.5.0b4ac9ee22483
stdlib@go1.26.3
1.25.12

Open the chart page →

3,493
valheim-serverk8s-chartsVerified publisher1.3.01 of 1See more

valheim-server k8s-charts 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
mbround18/valheim:3.1.070bd4da591cd
stdlib@go1.18.1
1.25.12

Open the chart page →

6,161
deploydefenderk8s-custom-controllerVerified publisher0.1.31 of 1See more

deploydefender k8s-custom-controller 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/manzil-infinity180/deploydefender:ea3ab0bb646cdbeddd1aca483ecf650f9ac0d0847fbc6855c8b3
stdlib@go1.22.7
1.25.12

Open the chart page →

1,902
k8s-dev-podk8s-dev-pod0.3.11 of 1See more

k8s-dev-pod k8s-dev-pod 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
stdlib@go1.24.3
1.25.12

Open the chart page →

8,899
k8s-drain-surgek8s-drain-surgeVerified publisher0.0.31 of 1See more

k8s-drain-surge k8s-drain-surge 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/aeyrtonvs/k8s-drain-surge:0.0.338bce7856b5c
stdlib@go1.25.10
1.25.12

Open the chart page →

137
bitmagnetk8s-home-lab-repo1.0.21 of 1See more

bitmagnet k8s-home-lab-repo 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/bitmagnet-io/bitmagnet:v0.10b6373349a301
stdlib@go1.23.6
1.25.12

Open the chart page →

1,169
blockyk8s-home-lab-repo11.2.11 of 1See more

blocky k8s-home-lab-repo 11.2.1

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/0xerr0r/blocky:v0.29.0a6d99f323d30
stdlib@go1.26.0
1.25.12

Open the chart page →

580
ghostk8s-home-lab-repo4.1.01 of 1See more

ghost k8s-home-lab-repo 4.1.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
library/ghost:6.41.129773d6be407
stdlib@go1.24.6
1.25.12

Open the chart page →

3,114
giteak8s-home-lab-repo2.6.01 of 1See more

gitea k8s-home-lab-repo 2.6.0

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
gitea/gitea:1.26.27d13848af126
stdlib@go1.26.3-X:jsonv2
1.25.12

Open the chart page →

2,146
influxdb-exporterk8s-home-lab-repo1.1.31 of 1See more

influxdb-exporter k8s-home-lab-repo 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
prom/influxdb-exporter:v0.11.427e33e18634a
stdlib@go1.19.9
1.25.12

Open the chart page →

624
maddyk8s-home-lab-repo4.2.11 of 1See more

maddy k8s-home-lab-repo 4.2.1

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
foxcpp/maddy:0.8.2eeb5813fc4d1
stdlib@go1.23.12
1.25.12

Open the chart page →

1,059
paperlessk8s-home-lab-repo11.0.11 of 1See more

paperless k8s-home-lab-repo 11.0.1

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
stdlib@go1.24.4
1.25.12

Open the chart page →

9,135
photoprismk8s-home-lab-repo10.0.11 of 1See more

photoprism k8s-home-lab-repo 10.0.1

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
photoprism/photoprism:231128-ce284de9cc4f9c
stdlib@go1.21.4
1.25.12

Open the chart page →

1,140
zurgk8s-home-lab-repo1.2.11 of 1See more

zurg k8s-home-lab-repo 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/debridmediamanager/zurg-testing:v0.9.3-final5c47ef99443a
stdlib@go1.22.5
1.25.12

Open the chart page →

1,733
k8s-jacoco-operatork8s-jacoco-operator0.4.01 of 4See more

k8s-jacoco-operator k8s-jacoco-operator 0.4.0

1 of the 4 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/curium-rocks/docker-kubectl:maind04c003d7593
stdlib@go1.22.5
1.25.12

Open the chart page →

2,440
k8s-mutating-admission-webhookk8s-mutating-admission-webhook1.15.11 of 1See more

k8s-mutating-admission-webhook k8s-mutating-admission-webhook 1.15.1

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
udhos/k8s-mutating-admission-webhook:1.15.1e588db500edf
stdlib@go1.26.3
1.25.12

Open the chart page →

945
k8s-mutating-webhookk8s-mutating-webhook0.3.01 of 2See more

k8s-mutating-webhook k8s-mutating-webhook 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/curium-rocks/docker-kubectl:maind04c003d7593
stdlib@go1.22.5
1.25.12

Open the chart page →

2,010
k8s-ondemand-proxyk8s-ondemand-proxy0.0.61 of 1See more

k8s-ondemand-proxy k8s-ondemand-proxy 0.0.6

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
ghcr.io/nefelim4ag/k8s-ondemand-proxy:0.0.2078b25d48cf7
stdlib@go1.21.1
1.25.12

Open the chart page →

815
github-exporterk8sonlabVerified publisher0.0.41 of 1See more

github-exporter k8sonlab 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
githubexporter/github-exporter:v2.3.1a36fbedeedf8
stdlib@go1.26.4
1.25.12

Open the chart page →

68
librephotosk8sonlabVerified publisher1.1.63 of 7See more

librephotos k8sonlab 1.1.6

3 of the 7 container images this version deploys carry CVE-2026-39822.

Container imageDigestPackageFixed in
alpine/k8s:1.22.600ac10bcb759
stdlib@go1.17.6
1.25.12
bitnamilegacy/redis:latest5927ff3702df
stdlib@go1.24.5
1.25.12
reallibrephotos/librephotos-frontend:1.0.358cdf5e93471
stdlib@go1.24.13
1.25.12

Open the chart page →

14,872

Container images carrying it

4,913 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.25.12
89
library/postgres:18:18.6:18.6-trixie:latest4ef4dbc939d6
stdlib@go1.24.6
1.25.12
69
library/mysql:5.74bc6bc963e6d
stdlib@go1.18.2
1.25.12
22
library/postgres:18.6-alpine:18-alpine:alpined3e1620b530c
stdlib@go1.24.6
1.25.12
17
library/mysql:8:8.4:8.4.11b3b90af2a655
stdlib@go1.24.6
1.25.12
16
library/postgres:16-alpinecf78e76683b9
stdlib@go1.24.6
1.25.12
16
minio/minio:latest:RELEASE.2025-09-07T16-13-09Z14cea493d9a3
stdlib@go1.24.6
1.25.12
16
jimmidyson/configmap-reload:v0.5.0904d08e9f701
stdlib@go1.15.7
1.25.12
14
codeurjc/toposervice:v1.0:v1.239fb4c11e6a49
stdlib@go1.18.10
1.25.12
13
jenkins/jenkins:2.568.3-jdk21:2.568.3-lts-jdk21:ltsc1e4c349365f
stdlib@go1.25.3
1.25.12
13
library/postgres:17-alpine18cfe3ef5e68
stdlib@go1.24.6
1.25.12
13
ghcr.io/appscode/kubectl-nonroot:1.340b26892cec94
stdlib@go1.24.13
1.25.12
13
grafana/grafana:latestf772d434e8fa
stdlib@go1.26.3
1.25.12
12
library/postgres:16f1c3376c26f2
stdlib@go1.24.6
1.25.12
12
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
stdlib@go1.25.5
1.25.12
12
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.17.0f9de845b1701
stdlib@go1.26.3
1.25.12
12
library/mariadb:12.3.3:latest:ltsdd9b303aed4f
stdlib@go1.24.6
1.25.12
11
library/mongo:8:8.3.8:latest5211c51171f5
stdlib@go1.24.6
1.25.12
11
library/mysql:8.0.28fc77d54cacef
stdlib@go1.16.7
1.25.12
11
library/postgres:15-alpinefe0737ba566a
stdlib@go1.24.6
1.25.12
11
jwilder/dockerize:latestf94fb59fb4f6
stdlib@go1.25.5
1.25.12
10
library/mongo:5.0.6-focal8e70544b6c76
stdlib@go1.16.7
1.25.12
10
library/postgres:1767f41722b7a8
stdlib@go1.24.6
1.25.12
10
registry.k8s.io/sig-storage/csi-provisioner:v6.3.0a4b0b1a37605
stdlib@go1.26.3
1.25.12
10
quay.io/prometheus/node-exporter:v1.8.24032c6d5bfd7
stdlib@go1.22.5
1.25.12
9
library/rabbitmq:3.13-management:3-managemente582c0bc7766
stdlib@go1.22.2
1.25.12
8
prom/pushgateway:v1.4.2a684e7c830a4
stdlib@go1.16.9
1.25.12
8
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
stdlib@go1.23.4
1.25.12
8
quay.io/prometheus/alertmanager:v0.27.0e13b6ed5cb92
stdlib@go1.21.7
1.25.12
8
quay.io/prometheus/node-exporter:v1.0.1cf66a6bbd573
stdlib@go1.14.4
1.25.12
8
library/postgres:14156f0b253fd6
stdlib@go1.24.6
1.25.12
7
osixia/openldap:1.5.018742e9c449c
stdlib@go1.15.5
1.25.12
7
wurstmeister/kafka:latest2d4bbf9cc83d
stdlib@go1.17.10
1.25.12
7
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
stdlib@go1.25.3
1.25.12
7
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
stdlib@go1.24.4
1.25.12
7
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.2.2:8.2.2-1-ubi98e01c0305844
stdlib@go1.26.4
1.25.12
7
quay.io/minio/mc:RELEASE.2024-11-21T17-21-54Z993e8c454a7e
stdlib@go1.23.4
1.25.12
7
quay.io/thanos/thanos:v0.37.24ec6df40fdb9
stdlib@go1.23.4
1.25.12
7
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.19.185108987d044
stdlib@go1.26.4
1.25.12
7
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.15.011f199f6bec4
stdlib@go1.24.6
1.25.12
7
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.16.0ab482308a492
stdlib@go1.25.7
1.25.12
7
registry.k8s.io/sig-storage/csi-resizer:v2.1.0589e525cddef
stdlib@go1.25.7
1.25.12
7
registry.k8s.io/sig-storage/csi-resizer:v1.14.05e7cbb63fd49
stdlib@go1.24.2
1.25.12
7
bitnamilegacy/mongodb:6.0.10-debian-11-r842319decb591
stdlib@go1.19.12
1.25.12
6
bitnamilegacy/redis:8.2.1-debian-12-r025bf63f3caf7
stdlib@go1.25.0
1.25.12
6
clastix/kubectl:v1.3122918a06c253
stdlib@go1.22.5
1.25.12
6
grafana/grafana:7.0.3d72946c8e5d5
stdlib@go1.14.3
1.25.12
6
library/mariadb:10:10.11ce66c7be32a0
stdlib@go1.24.6
1.25.12
6
library/mysql:9.7.2257388edf9c8
stdlib@go1.24.6
1.25.12
6
library/postgres:159b1d34adbce1
stdlib@go1.24.6
1.25.12
6

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.