CVE-2026-39823

Medium

Advisory

Published 7 May 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.1; base score, highest
EPSS: 0.003; 24th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 3,939; of 17,787 indexed, latest versions
Container images: 4,537; deployed by those charts
Fix available: 1 of 2; affected packages

Bypass of meta content URL escaping causes XSS in html/template

Carried by container images the latest versions of 3,939 of 17,787 indexed charts deploy, on 4,537 images.

Affected package	Affected versions	Fixed in	Images
golang-1.19deb	1.19.8-2	no fix listed	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+179 more	1.25.10	4,537

OSV records: DEBIAN-CVE-2026-39823 GO-2026-4982
Also known as: BIT-golang-2026-39823

Charts affected

3,939 by stars

Chart

Latest

Affected images

Radar Score

k8s-grafana-stackk8s-grafana-stack

0.2.32

13 of 17 See more

k8s-grafana-stack k8s-grafana-stack 0.2.32

13 of the 17 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.14.0	f50931848bd8	stdlib@go1.25.7	1.25.10
grafana/grafana :12.3.1	2175aaa91c96	stdlib@go1.25.5	1.25.10
grafana/loki :3.6.7	3c8fd3570dd9	stdlib@go1.24.13	1.25.10
grafana/loki-canary :3.6.7	0dac7d5cb383	stdlib@go1.24.13	1.25.10
grafana/tempo :2.9.0	65a578975943	stdlib@go1.25.1	1.25.10
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	stdlib@go1.23.4	1.25.10
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	stdlib@go1.23.4	1.25.10
quay.io/prometheus-operator/prometheus-config-reloader :v0.81.0	959d47672fbf	stdlib@go1.23.7	1.25.10
quay.io/prometheus-operator/prometheus-config-reloader :v0.89.0	cb4ac6a56555	stdlib@go1.25.6	1.25.10
quay.io/prometheus/alertmanager :v0.31.1	88b605de9aba	stdlib@go1.25.7	1.25.10
quay.io/prometheus/node-exporter :v1.10.2	337ff1d356b6	stdlib@go1.25.3	1.25.10
quay.io/prometheus/prometheus :v3.10.0	7571a304e67f	stdlib@go1.26.0	1.25.10
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.18.0	1545919b72e3	stdlib@go1.25.5	1.25.10

Open the chart page →

15,459

kdiffkdiff-snapshots

0.0.203

1 of 2 See more

kdiff kdiff-snapshots 0.0.203

1 of the 2 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
ghcr.io/oguzhan-yilmaz/kdiff-snapshots :0.0.203	5bc5ca66d55a	stdlib@go1.24.7	1.25.10

Open the chart page →

5,515

kdiff-snapshotskdiff-snapshots

0.0.55

1 of 1 See more

kdiff-snapshots kdiff-snapshots 0.0.55

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
ghcr.io/oguzhan-yilmaz/kdiff-snapshots :0.0.55	d7f93d2182fe	stdlib@go1.24.4	1.25.10

Open the chart page →

5,795

kenerkener

0.2.0

1 of 1 See more

kener kener 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
rajnandan1/kener :3.2.19	30407afca731	stdlib@go1.20.7	1.25.10

Open the chart page →

5,234

keycloakkeycloak

1.13.5

1 of 2 See more

keycloak keycloak 1.13.5

1 of the 2 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
registry.gitlab.com/lenitech/docker/keycloak-ppolicy :0.6.0	9895d6915075	stdlib@go1.25.7	1.25.10

Open the chart page →

328

keycloak-client-operatorkeycloak-client-operator

0.9.1

1 of 1 See more

keycloak-client-operator keycloak-client-operator 0.9.1

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
registry.gitlab.com/lenitech/k8s-operator/keycloak-client :v0.6.1	9065cdd80035	stdlib@go1.24.5	1.25.10

Open the chart page →

507

keydbkeydb-helm

1.0.6

1 of 1 See more

keydb keydb-helm 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
eqalpha/keydb :x86_64_v6.3.4	eceb1806730c	stdlib@go1.16.7	1.25.10

Open the chart page →

5,302

giteakeyporttech

0.2.10

2 of 4 See more

gitea keyporttech 0.2.10

2 of the 4 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
gitea/gitea :1.12.4	85416d6f65fe	stdlib@go1.14.8	1.25.10
library/postgres :11	5d2aa4a7b5f9	stdlib@go1.16.7	1.25.10

Open the chart page →

5,408

kikplatekikplate

0.22.0

1 of 3 See more

kikplate kikplate 0.22.0

1 of the 3 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
library/postgres :16	f1c3376c26f2	stdlib@go1.24.6	1.25.10

Open the chart page →

2,783

glpikitsune-itops

1.0.7

1 of 3 See more

glpi kitsune-itops 1.0.7

1 of the 3 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
library/mariadb :latest	dd9b303aed4f	stdlib@go1.24.6	1.25.10

Open the chart page →

4,878

kokukoku

1.0.0

3 of 7 See more

koku koku 1.0.0

3 of the 7 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
minio/mc :latest	a7fe349ef4bd	stdlib@go1.24.6	1.25.10
public.ecr.aws/v0r6c2e2/minio :latest	08c90bd040bf	stdlib@go1.23.5	1.25.10
public.ecr.aws/v0r6c2e2/trino :latest	c265156b00d1	stdlib@go1.23.0	1.25.10

Open the chart page →

12,063

komkom

0.3.0

1 of 1 See more

kom kom 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
ghcr.io/kkb0318/kom :0.3.0	4e77eff2d906	stdlib@go1.24.4	1.25.10

Open the chart page →

398

kronos-corekronos-core

0.4.1

1 of 2 See more

kronos-core kronos-core 0.4.1

1 of the 2 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
kronosorg/kronos-core :v0.4.0	301da21c59a5	stdlib@go1.21.10	1.25.10

Open the chart page →

544

kubeadaptkubeadapt

1.0.4

1 of 1 See more

kubeadapt kubeadapt 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
public.ecr.aws/k2x0t8t6/kubeadapt/app/kubeadapt-k8s-agent :v3.0.1	d75b6da94913	stdlib@go1.26.2	1.25.10

Open the chart page →

214

cert-managerkubeblocks

1.17.2

4 of 4 See more

cert-manager kubeblocks 1.17.2

4 of the 4 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-cainjector :v1.17.2	ec56edb1161d	stdlib@go1.23.8	1.25.10
quay.io/jetstack/cert-manager-controller :v1.17.2	2c314feeb5e8	stdlib@go1.23.8	1.25.10
quay.io/jetstack/cert-manager-startupapicheck :v1.17.2	e18989b4f912	stdlib@go1.23.8	1.25.10
quay.io/jetstack/cert-manager-webhook :v1.17.2	37b16a9dff00	stdlib@go1.23.8	1.25.10

Open the chart page →

2,900

difykubeblocks

0.5.1

1 of 5 See more

dify kubeblocks 0.5.1

1 of the 5 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
langgenius/dify-sandbox :0.2.0	09b7e8705673	stdlib@go1.20.6	1.25.10

Open the chart page →

20,424

ks-corekubeblocks

1.1.3

2 of 5 See more

ks-core kubeblocks 1.1.3

2 of the 5 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
kubesphere/ks-extensions-museum :latest	29681958f220	stdlib@go1.20.12	1.25.10
kubesphere/kubectl :v1.27.16	49b445b1b732	stdlib@go1.18.10	1.25.10

Open the chart page →

4,723

kubebrowsekubebrowse

1.7.0

3 of 5 See more

kubebrowse kubebrowse 1.7.0

3 of the 5 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
minio/minio :latest	14cea493d9a3	stdlib@go1.24.6	1.25.10
ghcr.io/browsersec/kubebrowse :sha-09dfa1f	b853e9e6372a	stdlib@go1.24.3	1.25.10
ghcr.io/browsersec/kubebrowse-frontend :chore-improve-back	bd6bea5e487c	stdlib@go1.25.0	1.25.10

Open the chart page →

4,143

kubefedkubefed

0.10.0

1 of 2 See more

kubefed kubefed 0.10.0

1 of the 2 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
quay.io/kubernetes-multicluster/kubefed :v0.10.0	c4635c95730e	stdlib@go1.16.6	1.25.10

Open the chart page →

2,419

kubegems-installerkubegems

1.24.10

1 of 1 See more

kubegems-installer kubegems 1.24.10

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
kubegems/kubegems :v1.24.10	a730bcf9322a	stdlib@go1.24.10	1.25.10

Open the chart page →

3,381

kubegems-localkubegems

1.24.10

2 of 2 See more

kubegems-local kubegems 1.24.10

2 of the 2 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
kubegems/kubectl :latest	c3b4be9a54f5	stdlib@go1.20	1.25.10
kubegems/kubegems :v1.24.10	a730bcf9322a	stdlib@go1.24.10	1.25.10

Open the chart page →

6,090

monitoringkubegems

44.3.4

1 of 1 See more

monitoring kubegems 44.3.4

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
kubegems/alertproxy :v0.4.2	eaee03055329	stdlib@go1.18.10	1.25.10

Open the chart page →

741

kubernetes-events-exporterkubernetes-events-exporter

0.1.2

1 of 1 See more

kubernetes-events-exporter kubernetes-events-exporter 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
ghcr.io/ownkube/kubernetes-events-exporter :0.1.2	bcb7f0f733f5	stdlib@go1.26.2	1.25.10

Open the chart page →

496

owncloudkubernetes-homelab-helm-charts

0.1.0

2 of 3 See more

owncloud kubernetes-homelab-helm-charts 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
library/mariadb :10.11	ce66c7be32a0	stdlib@go1.24.6	1.25.10
owncloud/server :10.16.2	74c53d341076	stdlib@go1.26.2	1.25.10

Open the chart page →

9,975

tailscalekubernetes-homelab-helm-charts

0.1.2

1 of 2 See more

tailscale kubernetes-homelab-helm-charts 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
tailscale/tailscale :v1.96.5	dbeff02d2337	stdlib@go1.26.1	1.25.10

Open the chart page →

1,038

kubernetes-stateless-chartkubernetes-stateless-chart

1.0.3

1 of 1 See more

kubernetes-stateless-chart kubernetes-stateless-chart 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
portainer/portainer-ce :2.18.4-alpine	3e61aaee1341	stdlib@go1.19.4	1.25.10

Open the chart page →

3,275

kubescoutkubescoute

0.1.1

1 of 1 See more

kubescout kubescoute 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
ghcr.io/haedalwang/kubescout :0.1.1	07d51f838f0d	stdlib@go1.25.5	1.25.10

Open the chart page →

714

kubeseal-webguikubeseal-webgui

6.0.4

1 of 2 See more

kubeseal-webgui kubeseal-webgui 6.0.4

1 of the 2 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
ghcr.io/jaydee94/kubeseal-webgui/api :4.5.3	3cceb9462ae1	stdlib@go1.24.4	1.25.10

Open the chart page →

4,101

kubeseckubesec

1.1.0

1 of 1 See more

kubesec kubesec 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
kubesec/kubesec :latest	025a365d9f18	stdlib@go1.23.3	1.25.10

Open the chart page →

1,075

kube-site-followerkube-site-follower

0.1.14

1 of 2 See more

kube-site-follower kube-site-follower 0.1.14

1 of the 2 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
ghcr.io/cloudnative-pg/cloudnative-pg :1.25.0	a27779ed1085	stdlib@go1.23.4	1.25.10

Open the chart page →

902

juicefskubesphere-stable

0.16.2

1 of 4 See more

juicefs kubesphere-stable 0.16.2

1 of the 4 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
juicedata/juicefs-csi-driver :v0.20.0	43978fc60798	stdlib@go1.18.10	1.25.10

Open the chart page →

2,489

mesherykubesphere-stable

0.5.0

12 of 13 See more

meshery kubesphere-stable 0.5.0

12 of the 13 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
layer5/meshery :stable-latest	78a8be21bef3	stdlib@go1.23.9	1.25.10
layer5/meshery-app-mesh :stable-latest	77d59943b3d6	stdlib@go1.19.5	1.25.10
layer5/meshery-consul :stable-latest	25a4cc38abcd	stdlib@go1.19.13	1.25.10
layer5/meshery-cpx :stable-latest	8c20a8a1d6a4	stdlib@go1.13.1	1.25.10
layer5/meshery-istio :stable-latest	fde47c141ec6	stdlib@go1.23.9	1.25.10
layer5/meshery-kuma :stable-latest	9d25f029a8a2	stdlib@go1.23.4	1.25.10
layer5/meshery-linkerd :stable-latest	b99c73bac1f5	stdlib@go1.23.6	1.25.10
layer5/meshery-nginx-sm :stable-latest	b3864dfd47ad	stdlib@go1.19.11	1.25.10
layer5/meshery-nsm :stable-latest	ebd6a8faf21f	stdlib@go1.15.12	1.25.10
layer5/meshery-operator :stable-latest	6f58a28fe422	stdlib@go1.23.9	1.25.10
layer5/meshery-osm :stable-latest	ec898e5786c6	stdlib@go1.19.8	1.25.10
layer5/meshery-traefik-mesh :stable-latest	797fa7a03570	stdlib@go1.19.11	1.25.10

Open the chart page →

24,690

aws-efs-csi-driverkubesphere-test

0.1.0

1 of 3 See more

aws-efs-csi-driver kubesphere-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
amazon/aws-efs-csi-driver :v0.3.0	b55277652ea8	stdlib@go1.13.4	1.25.10

Open the chart page →

2,605

hertzbeatkubesphere-test

1.4.1

1 of 4 See more

hertzbeat kubesphere-test 1.4.1

1 of the 4 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
library/mysql :8	b3b90af2a655	stdlib@go1.24.6	1.25.10

Open the chart page →

7,749

kube-state-metricskubestar-state-metrics

0.1.10

1 of 1 See more

kube-state-metrics kubestar-state-metrics 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.6.0	bdab4e49d71d	stdlib@go1.18.5	1.25.10

Open the chart page →

1,575

kubetailkubetail

0.26.0

3 of 3 See more

kubetail kubetail 0.26.0

3 of the 3 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
ghcr.io/kubetail-org/kubetail-cluster-agent :0.7.1	a5eee8cab215	stdlib@go1.24.2	1.25.10
ghcr.io/kubetail-org/kubetail-cluster-api :0.8.2	8e6acd0da9ac	stdlib@go1.25.8	1.25.10
ghcr.io/kubetail-org/kubetail-dashboard :0.17.0	8617f0a7f703	stdlib@go1.25.8	1.25.10

Open the chart page →

1,850

kube-vault-controllerkube-vault-controller

1.2.0

1 of 1 See more

kube-vault-controller kube-vault-controller 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
kupnu4x/kube-vault-controller :1.2.0	3be59109f3d6	stdlib@go1.21.1	1.25.10

Open the chart page →

1,550

kube-vip-cloud-providerkube-vip

0.2.10

1 of 1 See more

kube-vip-cloud-provider kube-vip 0.2.10

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
kubevip/kube-vip-cloud-provider :v0.0.12	f8f4e3401f76	stdlib@go1.24.2	1.25.10

Open the chart page →

791

kubemodkubmod

0.5.2

2 of 2 See more

kubemod kubmod 0.5.2

2 of the 2 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
kubemod/kubemod :v0.19.1	1f8154f7e80c	stdlib@go1.18	1.25.10
kubemod/kubemod-crt :v1.3.0	028347c9fa77	stdlib@go1.18.1	1.25.10

Open the chart page →

4,542

kubeservice-cosign-webhookkubservice-charts

1.1.1

5 of 5 See more

kubeservice-cosign-webhook kubservice-charts 1.1.1

5 of the 5 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
dongjiang1989/cosign-webhook :v1.1.0	2a3ead6a55dc	stdlib@go1.19.12	1.25.10
quay.io/jetstack/cert-manager-cainjector :v1.13.1	72072d492b43	stdlib@go1.20.8	1.25.10
quay.io/jetstack/cert-manager-controller :v1.13.1	6b83f55bd99e	stdlib@go1.20.8	1.25.10
quay.io/jetstack/cert-manager-ctl :v1.13.1	c10bde7ff9ad	stdlib@go1.20.8	1.25.10
quay.io/jetstack/cert-manager-webhook :v1.13.1	48ea4a77dfa7	stdlib@go1.20.8	1.25.10

Open the chart page →

7,087

kubeservice-cpupools-controllerkubservice-charts

0.1.1

2 of 2 See more

kubeservice-cpupools-controller kubservice-charts 0.1.1

2 of the 2 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
dongjiang1989/cpusets-controller :v1.1.1	dc5bd483874c	stdlib@go1.19.10	1.25.10
dongjiang1989/cpusets-device-plugin :v1.1.1	923085c65123	stdlib@go1.19.10	1.25.10

Open the chart page →

3,122

kubeservice-custom-limitrangekubservice-charts

1.3.0

5 of 5 See more

kubeservice-custom-limitrange kubservice-charts 1.3.0

5 of the 5 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
ghcr.io/kubeservice-stack/customlimitrange-manager :v1.3.0	d3ed97d142d4	stdlib@go1.24.1	1.25.10
quay.io/jetstack/cert-manager-cainjector :v1.13.1	72072d492b43	stdlib@go1.20.8	1.25.10
quay.io/jetstack/cert-manager-controller :v1.13.1	6b83f55bd99e	stdlib@go1.20.8	1.25.10
quay.io/jetstack/cert-manager-ctl :v1.13.1	c10bde7ff9ad	stdlib@go1.20.8	1.25.10
quay.io/jetstack/cert-manager-webhook :v1.13.1	48ea4a77dfa7	stdlib@go1.20.8	1.25.10

Open the chart page →

5,941

kubeservice-ebpf-exporterkubservice-charts

1.2.1

1 of 1 See more

kubeservice-ebpf-exporter kubservice-charts 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
ghcr.io/cloudflare/ebpf_exporter :v2.3.0	75370b2ec2bb	stdlib@go1.21.5	1.25.10

Open the chart page →

545

kubeservice-namespace-node-affinitykubservice-charts

1.1.2

5 of 5 See more

kubeservice-namespace-node-affinity kubservice-charts 1.1.2

5 of the 5 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
dongjiang1989/ns-node-affinity :latest	451f7823723c	stdlib@go1.18.5	1.25.10
quay.io/jetstack/cert-manager-cainjector :v1.13.1	72072d492b43	stdlib@go1.20.8	1.25.10
quay.io/jetstack/cert-manager-controller :v1.13.1	6b83f55bd99e	stdlib@go1.20.8	1.25.10
quay.io/jetstack/cert-manager-ctl :v1.13.1	c10bde7ff9ad	stdlib@go1.20.8	1.25.10
quay.io/jetstack/cert-manager-webhook :v1.13.1	48ea4a77dfa7	stdlib@go1.20.8	1.25.10

Open the chart page →

6,872

kubeservice-scheduler-pluskubservice-charts

0.2.1

1 of 2 See more

kubeservice-scheduler-plus kubservice-charts 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
dongjiang1989/crane-scheduler-controller :main	f0055c05dbee	stdlib@go1.19.9	1.25.10

Open the chart page →

1,803

ingress-annotatorkuoss

0.3.0

1 of 1 See more

ingress-annotator kuoss 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
ghcr.io/kuoss/ingress-annotator :v0.3.0	ae179f65d869	stdlib@go1.24.6	1.25.10

Open the chart page →

480

kube-fencingkvaps

2.4.1

2 of 2 See more

kube-fencing kvaps 2.4.1

2 of the 2 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
ghcr.io/kvaps/kube-fencing-controller :v2.4.0	313edfec2fca	stdlib@go1.18.8	1.25.10
ghcr.io/kvaps/kube-fencing-switcher :v2.4.0	f8c378e63b78	stdlib@go1.18.8	1.25.10

Open the chart page →

2,538

linstorkvaps

1.14.0

4 of 11 See more

linstor kvaps 1.14.0

4 of the 11 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
ghcr.io/kvaps/linstor-controller :v1.14.0	00ce11c31087	stdlib@go1.15.14	1.25.10
ghcr.io/kvaps/linstor-csi :v1.14.0	087618d16b83	stdlib@go1.15.14	1.25.10
ghcr.io/kvaps/linstor-ha-controller :v1.14.0	8e7b44bbd123	stdlib@go1.15.14	1.25.10
ghcr.io/kvaps/linstor-stork :v1.14.0	5e409a6332b4	stdlib@go1.15.14	1.25.10

Open the chart page →

15,551

kymaroskymaros

0.6.9

1 of 1 See more

kymaros kymaros 0.6.9

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
ghcr.io/kymaroshq/kymaros :0.6.9	fb3b88633381	stdlib@go1.25.9	1.25.10

Open the chart page →

269

chibisafel4g

0.1.1

1 of 3 See more

chibisafe l4g 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
chibisafe/chibisafe-server :latest	3da4fcbc1a18	stdlib@go1.20.12	1.25.10

Open the chart page →

5,657

Container images carrying it

4,537 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.5.0	09a36e2be1db	stdlib@go1.18.3	1.25.10	2
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.7.0	a15ca437f230	stdlib@go1.19.3	1.25.10	2
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.10.1	af8220f53493	stdlib@go1.20.10	1.25.10	2
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.6.0	bdab4e49d71d	stdlib@go1.18.5	1.25.10	2
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.15.0	db384bf43222	stdlib@go1.23.5	1.25.10	2
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.10.0	ec5d6f6be228	stdlib@go1.20.7	1.25.10	2
registry.k8s.io/metrics-server/metrics-server :v0.8.0	89258156d0e9	stdlib@go1.24.4	1.25.10	2
registry.k8s.io/sig-storage/csi-attacher :v4.9.0	5aaefc24f315	stdlib@go1.24.2	1.25.10	2
registry.k8s.io/sig-storage/csi-attacher :v3.4.0	8b9c313c05f5	stdlib@go1.17.3	1.25.10	2
registry.k8s.io/sig-storage/csi-attacher :v4.0.0	9a685020911e	stdlib@go1.18	1.25.10	2
registry.k8s.io/sig-storage/csi-attacher :v4.8.0	a399393ff5bd	stdlib@go1.23.1	1.25.10	2
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.5.1	0103eee7c35e	stdlib@go1.17.3	1.25.10	2
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.5.0	4fd21f36075b	stdlib@go1.17.3	1.25.10	2
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.6.0	f1c25991bac2	stdlib@go1.18	1.25.10	2
registry.k8s.io/sig-storage/csi-provisioner :v3.1.0	122bfb8c1eda	stdlib@go1.17.3	1.25.10	2
registry.k8s.io/sig-storage/csi-provisioner :v6.1.1	d992c36d4ddd	stdlib@go1.24.6	1.25.10	2
registry.k8s.io/sig-storage/csi-provisioner :v6.1.0	e5900dc98b0d	stdlib@go1.24.6	1.25.10	2
registry.k8s.io/sig-storage/csi-resizer :v1.5.0	8f7520bd957e	stdlib@go1.18	1.25.10	2
registry.k8s.io/sig-storage/csi-resizer :v1.4.0	9ebbf9f023e7	stdlib@go1.17.3	1.25.10	2
registry.k8s.io/sig-storage/csi-resizer :v1.9.0	f1f352df9787	stdlib@go1.20.5	1.25.10	2
registry.k8s.io/sig-storage/csi-snapshotter :v6.0.1	ad16874e2140	stdlib@go1.18	1.25.10	2
registry.k8s.io/sig-storage/csi-snapshotter :v8.3.0	bc7be893ecc3	stdlib@go1.24.2	1.25.10	2
registry.k8s.io/sig-storage/csi-snapshotter :v8.2.0	dd788d79cf4c	stdlib@go1.23.1	1.25.10	2
registry.k8s.io/sig-storage/livenessprobe :v2.15.0	2c5f9dc4ea5a	stdlib@go1.23.1	1.25.10	2
registry.k8s.io/sig-storage/livenessprobe :v2.17.0	9b75b9ade162	stdlib@go1.24.6	1.25.10	2
registry.k8s.io/sig-storage/livenessprobe :v2.8.0	cacee2b5c36d	stdlib@go1.18	1.25.10	2
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner :v4.0.2	63d5e04551ec	stdlib@go1.15	1.25.10	2
registry.k8s.io/sig-storage/snapshot-controller :v8.3.0	12c2da094b02	stdlib@go1.24.2	1.25.10	2
0xpolygon/bor :1.3.7	396d3de26d8b	stdlib@go1.22.1	1.25.10	1
0xpolygon/heimdall :1.0.1	34ddf259993c	stdlib@go1.20.5	1.25.10	1
1dev/server :11.9.0	cd5b12fe5471	stdlib@go1.23.8	1.25.10	1
1password/connect-api :1.7.2	6aa94cf713f9	stdlib@go1.20.6	1.25.10	1
1password/connect-api :1.8.2	e915c0c84397	stdlib@go1.25.7	1.25.10	1
1password/connect-sync :1.8.2	6297ca6136c0	stdlib@go1.25.7	1.25.10	1
1password/connect-sync :1.7.2	fe527ed9d81f	stdlib@go1.20.6	1.25.10	1
1password/kubernetes-secrets-injector :1.0.2	5884757f7879	stdlib@go1.20.5	1.25.10	1
aavishay/right-sizer :0.6.2	3d7c4d79595c	stdlib@go1.25.8	1.25.10	1
abiondevelopment/cert-manager-webhook-abion :latest	c741988fbd23	stdlib@go1.25.1	1.25.10	1
abohatyrenko/bucket-backup-restore :latest	fa98af15a13e	stdlib@go1.21.4	1.25.10	1
aboogie/login_test_backend :new	9c41a4483ac8	stdlib@go1.22.5	1.25.10	1
absaoss/terraform-controller :v0.0.20	ad538a1285a0	stdlib@go1.14.8	1.25.10	1
activepieces/activepieces :0.90.4	30c10a04fe3d	stdlib@go1.23.5	1.25.10	1
adguard/adguardhome :v0.107.51	3a143e6c071c	stdlib@go1.22.4	1.25.10	1
adguard/adguardhome :v0.107.38	43ec119419a9	stdlib@go1.20.8	1.25.10	1
adguard/adguardhome :v0.107.59	5d5e3aef39a8	stdlib@go1.24.1	1.25.10	1
adguard/adguardhome :v0.107.73	7fbf01d73ecb	stdlib@go1.25.7	1.25.10	1
adguard/adguardhome :v0.107.7	b9974aed13d0	stdlib@go1.17.9	1.25.10	1
adguard/adguardhome :v0.107.56	c64a0b37f7b9	stdlib@go1.23.5	1.25.10	1
adguard/adguardhome :v0.107.65	d765078d2140	stdlib@go1.24.6	1.25.10	1
adrianberger/fluxcd-webui :latest	76848c0d2780	stdlib@go1.16.2	1.25.10	1