CVE-2026-39823

Medium

Advisory

Published 7 May 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.1; base score, highest
EPSS: 0.003; 24th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 3,939; of 17,787 indexed, latest versions
Container images: 4,537; deployed by those charts
Fix available: 1 of 2; affected packages

Bypass of meta content URL escaping causes XSS in html/template

Carried by container images the latest versions of 3,939 of 17,787 indexed charts deploy, on 4,537 images.

Affected package	Affected versions	Fixed in	Images
golang-1.19deb	1.19.8-2	no fix listed	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+179 more	1.25.10	4,537

OSV records: DEBIAN-CVE-2026-39823 GO-2026-4982
Also known as: BIT-golang-2026-39823

Charts affected

3,939 by stars

Chart

Latest

Affected images

Radar Score

k8s-grafana-stackk8s-grafana-stack

0.2.32

13 of 17 See more

k8s-grafana-stack k8s-grafana-stack 0.2.32

13 of the 17 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.14.0	f50931848bd8	stdlib@go1.25.7	1.25.10
grafana/grafana :12.3.1	2175aaa91c96	stdlib@go1.25.5	1.25.10
grafana/loki :3.6.7	3c8fd3570dd9	stdlib@go1.24.13	1.25.10
grafana/loki-canary :3.6.7	0dac7d5cb383	stdlib@go1.24.13	1.25.10
grafana/tempo :2.9.0	65a578975943	stdlib@go1.25.1	1.25.10
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	stdlib@go1.23.4	1.25.10
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	stdlib@go1.23.4	1.25.10
quay.io/prometheus-operator/prometheus-config-reloader :v0.81.0	959d47672fbf	stdlib@go1.23.7	1.25.10
quay.io/prometheus-operator/prometheus-config-reloader :v0.89.0	cb4ac6a56555	stdlib@go1.25.6	1.25.10
quay.io/prometheus/alertmanager :v0.31.1	88b605de9aba	stdlib@go1.25.7	1.25.10
quay.io/prometheus/node-exporter :v1.10.2	337ff1d356b6	stdlib@go1.25.3	1.25.10
quay.io/prometheus/prometheus :v3.10.0	7571a304e67f	stdlib@go1.26.0	1.25.10
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.18.0	1545919b72e3	stdlib@go1.25.5	1.25.10

Open the chart page →

15,459

kdiffkdiff-snapshots

0.0.203

1 of 2 See more

kdiff kdiff-snapshots 0.0.203

1 of the 2 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
ghcr.io/oguzhan-yilmaz/kdiff-snapshots :0.0.203	5bc5ca66d55a	stdlib@go1.24.7	1.25.10

Open the chart page →

5,515

kdiff-snapshotskdiff-snapshots

0.0.55

1 of 1 See more

kdiff-snapshots kdiff-snapshots 0.0.55

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
ghcr.io/oguzhan-yilmaz/kdiff-snapshots :0.0.55	d7f93d2182fe	stdlib@go1.24.4	1.25.10

Open the chart page →

5,795

kenerkener

0.2.0

1 of 1 See more

kener kener 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
rajnandan1/kener :3.2.19	30407afca731	stdlib@go1.20.7	1.25.10

Open the chart page →

5,234

keycloakkeycloak

1.13.5

1 of 2 See more

keycloak keycloak 1.13.5

1 of the 2 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
registry.gitlab.com/lenitech/docker/keycloak-ppolicy :0.6.0	9895d6915075	stdlib@go1.25.7	1.25.10

Open the chart page →

328

keycloak-client-operatorkeycloak-client-operator

0.9.1

1 of 1 See more

keycloak-client-operator keycloak-client-operator 0.9.1

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
registry.gitlab.com/lenitech/k8s-operator/keycloak-client :v0.6.1	9065cdd80035	stdlib@go1.24.5	1.25.10

Open the chart page →

507

keydbkeydb-helm

1.0.6

1 of 1 See more

keydb keydb-helm 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
eqalpha/keydb :x86_64_v6.3.4	eceb1806730c	stdlib@go1.16.7	1.25.10

Open the chart page →

5,302

giteakeyporttech

0.2.10

2 of 4 See more

gitea keyporttech 0.2.10

2 of the 4 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
gitea/gitea :1.12.4	85416d6f65fe	stdlib@go1.14.8	1.25.10
library/postgres :11	5d2aa4a7b5f9	stdlib@go1.16.7	1.25.10

Open the chart page →

5,408

kikplatekikplate

0.22.0

1 of 3 See more

kikplate kikplate 0.22.0

1 of the 3 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
library/postgres :16	f1c3376c26f2	stdlib@go1.24.6	1.25.10

Open the chart page →

2,783

glpikitsune-itops

1.0.7

1 of 3 See more

glpi kitsune-itops 1.0.7

1 of the 3 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
library/mariadb :latest	dd9b303aed4f	stdlib@go1.24.6	1.25.10

Open the chart page →

4,878

kokukoku

1.0.0

3 of 7 See more

koku koku 1.0.0

3 of the 7 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
minio/mc :latest	a7fe349ef4bd	stdlib@go1.24.6	1.25.10
public.ecr.aws/v0r6c2e2/minio :latest	08c90bd040bf	stdlib@go1.23.5	1.25.10
public.ecr.aws/v0r6c2e2/trino :latest	c265156b00d1	stdlib@go1.23.0	1.25.10

Open the chart page →

12,063

komkom

0.3.0

1 of 1 See more

kom kom 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
ghcr.io/kkb0318/kom :0.3.0	4e77eff2d906	stdlib@go1.24.4	1.25.10

Open the chart page →

398

kronos-corekronos-core

0.4.1

1 of 2 See more

kronos-core kronos-core 0.4.1

1 of the 2 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
kronosorg/kronos-core :v0.4.0	301da21c59a5	stdlib@go1.21.10	1.25.10

Open the chart page →

544

kubeadaptkubeadapt

1.0.4

1 of 1 See more

kubeadapt kubeadapt 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
public.ecr.aws/k2x0t8t6/kubeadapt/app/kubeadapt-k8s-agent :v3.0.1	d75b6da94913	stdlib@go1.26.2	1.25.10

Open the chart page →

214

cert-managerkubeblocks

1.17.2

4 of 4 See more

cert-manager kubeblocks 1.17.2

4 of the 4 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-cainjector :v1.17.2	ec56edb1161d	stdlib@go1.23.8	1.25.10
quay.io/jetstack/cert-manager-controller :v1.17.2	2c314feeb5e8	stdlib@go1.23.8	1.25.10
quay.io/jetstack/cert-manager-startupapicheck :v1.17.2	e18989b4f912	stdlib@go1.23.8	1.25.10
quay.io/jetstack/cert-manager-webhook :v1.17.2	37b16a9dff00	stdlib@go1.23.8	1.25.10

Open the chart page →

2,900

difykubeblocks

0.5.1

1 of 5 See more

dify kubeblocks 0.5.1

1 of the 5 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
langgenius/dify-sandbox :0.2.0	09b7e8705673	stdlib@go1.20.6	1.25.10

Open the chart page →

20,424

ks-corekubeblocks

1.1.3

2 of 5 See more

ks-core kubeblocks 1.1.3

2 of the 5 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
kubesphere/ks-extensions-museum :latest	29681958f220	stdlib@go1.20.12	1.25.10
kubesphere/kubectl :v1.27.16	49b445b1b732	stdlib@go1.18.10	1.25.10

Open the chart page →

4,723

kubebrowsekubebrowse

1.7.0

3 of 5 See more

kubebrowse kubebrowse 1.7.0

3 of the 5 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
minio/minio :latest	14cea493d9a3	stdlib@go1.24.6	1.25.10
ghcr.io/browsersec/kubebrowse :sha-09dfa1f	b853e9e6372a	stdlib@go1.24.3	1.25.10
ghcr.io/browsersec/kubebrowse-frontend :chore-improve-back	bd6bea5e487c	stdlib@go1.25.0	1.25.10

Open the chart page →

4,143

kubefedkubefed

0.10.0

1 of 2 See more

kubefed kubefed 0.10.0

1 of the 2 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
quay.io/kubernetes-multicluster/kubefed :v0.10.0	c4635c95730e	stdlib@go1.16.6	1.25.10

Open the chart page →

2,419

kubegems-installerkubegems

1.24.10

1 of 1 See more

kubegems-installer kubegems 1.24.10

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
kubegems/kubegems :v1.24.10	a730bcf9322a	stdlib@go1.24.10	1.25.10

Open the chart page →

3,381

kubegems-localkubegems

1.24.10

2 of 2 See more

kubegems-local kubegems 1.24.10

2 of the 2 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
kubegems/kubectl :latest	c3b4be9a54f5	stdlib@go1.20	1.25.10
kubegems/kubegems :v1.24.10	a730bcf9322a	stdlib@go1.24.10	1.25.10

Open the chart page →

6,090

monitoringkubegems

44.3.4

1 of 1 See more

monitoring kubegems 44.3.4

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
kubegems/alertproxy :v0.4.2	eaee03055329	stdlib@go1.18.10	1.25.10

Open the chart page →

741

kubernetes-events-exporterkubernetes-events-exporter

0.1.2

1 of 1 See more

kubernetes-events-exporter kubernetes-events-exporter 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
ghcr.io/ownkube/kubernetes-events-exporter :0.1.2	bcb7f0f733f5	stdlib@go1.26.2	1.25.10

Open the chart page →

496

owncloudkubernetes-homelab-helm-charts

0.1.0

2 of 3 See more

owncloud kubernetes-homelab-helm-charts 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
library/mariadb :10.11	ce66c7be32a0	stdlib@go1.24.6	1.25.10
owncloud/server :10.16.2	74c53d341076	stdlib@go1.26.2	1.25.10

Open the chart page →

9,975

tailscalekubernetes-homelab-helm-charts

0.1.2

1 of 2 See more

tailscale kubernetes-homelab-helm-charts 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
tailscale/tailscale :v1.96.5	dbeff02d2337	stdlib@go1.26.1	1.25.10

Open the chart page →

1,038

kubernetes-stateless-chartkubernetes-stateless-chart

1.0.3

1 of 1 See more

kubernetes-stateless-chart kubernetes-stateless-chart 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
portainer/portainer-ce :2.18.4-alpine	3e61aaee1341	stdlib@go1.19.4	1.25.10

Open the chart page →

3,275

kubescoutkubescoute

0.1.1

1 of 1 See more

kubescout kubescoute 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
ghcr.io/haedalwang/kubescout :0.1.1	07d51f838f0d	stdlib@go1.25.5	1.25.10

Open the chart page →

714

kubeseal-webguikubeseal-webgui

6.0.4

1 of 2 See more

kubeseal-webgui kubeseal-webgui 6.0.4

1 of the 2 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
ghcr.io/jaydee94/kubeseal-webgui/api :4.5.3	3cceb9462ae1	stdlib@go1.24.4	1.25.10

Open the chart page →

4,101

kubeseckubesec

1.1.0

1 of 1 See more

kubesec kubesec 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
kubesec/kubesec :latest	025a365d9f18	stdlib@go1.23.3	1.25.10

Open the chart page →

1,075

kube-site-followerkube-site-follower

0.1.14

1 of 2 See more

kube-site-follower kube-site-follower 0.1.14

1 of the 2 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
ghcr.io/cloudnative-pg/cloudnative-pg :1.25.0	a27779ed1085	stdlib@go1.23.4	1.25.10

Open the chart page →

902

juicefskubesphere-stable

0.16.2

1 of 4 See more

juicefs kubesphere-stable 0.16.2

1 of the 4 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
juicedata/juicefs-csi-driver :v0.20.0	43978fc60798	stdlib@go1.18.10	1.25.10

Open the chart page →

2,489

mesherykubesphere-stable

0.5.0

12 of 13 See more

meshery kubesphere-stable 0.5.0

12 of the 13 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
layer5/meshery :stable-latest	78a8be21bef3	stdlib@go1.23.9	1.25.10
layer5/meshery-app-mesh :stable-latest	77d59943b3d6	stdlib@go1.19.5	1.25.10
layer5/meshery-consul :stable-latest	25a4cc38abcd	stdlib@go1.19.13	1.25.10
layer5/meshery-cpx :stable-latest	8c20a8a1d6a4	stdlib@go1.13.1	1.25.10
layer5/meshery-istio :stable-latest	fde47c141ec6	stdlib@go1.23.9	1.25.10
layer5/meshery-kuma :stable-latest	9d25f029a8a2	stdlib@go1.23.4	1.25.10
layer5/meshery-linkerd :stable-latest	b99c73bac1f5	stdlib@go1.23.6	1.25.10
layer5/meshery-nginx-sm :stable-latest	b3864dfd47ad	stdlib@go1.19.11	1.25.10
layer5/meshery-nsm :stable-latest	ebd6a8faf21f	stdlib@go1.15.12	1.25.10
layer5/meshery-operator :stable-latest	6f58a28fe422	stdlib@go1.23.9	1.25.10
layer5/meshery-osm :stable-latest	ec898e5786c6	stdlib@go1.19.8	1.25.10
layer5/meshery-traefik-mesh :stable-latest	797fa7a03570	stdlib@go1.19.11	1.25.10

Open the chart page →

24,690

aws-efs-csi-driverkubesphere-test

0.1.0

1 of 3 See more

aws-efs-csi-driver kubesphere-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
amazon/aws-efs-csi-driver :v0.3.0	b55277652ea8	stdlib@go1.13.4	1.25.10

Open the chart page →

2,605

hertzbeatkubesphere-test

1.4.1

1 of 4 See more

hertzbeat kubesphere-test 1.4.1

1 of the 4 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
library/mysql :8	b3b90af2a655	stdlib@go1.24.6	1.25.10

Open the chart page →

7,749

kube-state-metricskubestar-state-metrics

0.1.10

1 of 1 See more

kube-state-metrics kubestar-state-metrics 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.6.0	bdab4e49d71d	stdlib@go1.18.5	1.25.10

Open the chart page →

1,575

kubetailkubetail

0.26.0

3 of 3 See more

kubetail kubetail 0.26.0

3 of the 3 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
ghcr.io/kubetail-org/kubetail-cluster-agent :0.7.1	a5eee8cab215	stdlib@go1.24.2	1.25.10
ghcr.io/kubetail-org/kubetail-cluster-api :0.8.2	8e6acd0da9ac	stdlib@go1.25.8	1.25.10
ghcr.io/kubetail-org/kubetail-dashboard :0.17.0	8617f0a7f703	stdlib@go1.25.8	1.25.10

Open the chart page →

1,850

kube-vault-controllerkube-vault-controller

1.2.0

1 of 1 See more

kube-vault-controller kube-vault-controller 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
kupnu4x/kube-vault-controller :1.2.0	3be59109f3d6	stdlib@go1.21.1	1.25.10

Open the chart page →

1,550

kube-vip-cloud-providerkube-vip

0.2.10

1 of 1 See more

kube-vip-cloud-provider kube-vip 0.2.10

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
kubevip/kube-vip-cloud-provider :v0.0.12	f8f4e3401f76	stdlib@go1.24.2	1.25.10

Open the chart page →

791

kubemodkubmod

0.5.2

2 of 2 See more

kubemod kubmod 0.5.2

2 of the 2 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
kubemod/kubemod :v0.19.1	1f8154f7e80c	stdlib@go1.18	1.25.10
kubemod/kubemod-crt :v1.3.0	028347c9fa77	stdlib@go1.18.1	1.25.10

Open the chart page →

4,542

kubeservice-cosign-webhookkubservice-charts

1.1.1

5 of 5 See more

kubeservice-cosign-webhook kubservice-charts 1.1.1

5 of the 5 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
dongjiang1989/cosign-webhook :v1.1.0	2a3ead6a55dc	stdlib@go1.19.12	1.25.10
quay.io/jetstack/cert-manager-cainjector :v1.13.1	72072d492b43	stdlib@go1.20.8	1.25.10
quay.io/jetstack/cert-manager-controller :v1.13.1	6b83f55bd99e	stdlib@go1.20.8	1.25.10
quay.io/jetstack/cert-manager-ctl :v1.13.1	c10bde7ff9ad	stdlib@go1.20.8	1.25.10
quay.io/jetstack/cert-manager-webhook :v1.13.1	48ea4a77dfa7	stdlib@go1.20.8	1.25.10

Open the chart page →

7,087

kubeservice-cpupools-controllerkubservice-charts

0.1.1

2 of 2 See more

kubeservice-cpupools-controller kubservice-charts 0.1.1

2 of the 2 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
dongjiang1989/cpusets-controller :v1.1.1	dc5bd483874c	stdlib@go1.19.10	1.25.10
dongjiang1989/cpusets-device-plugin :v1.1.1	923085c65123	stdlib@go1.19.10	1.25.10

Open the chart page →

3,122

kubeservice-custom-limitrangekubservice-charts

1.3.0

5 of 5 See more

kubeservice-custom-limitrange kubservice-charts 1.3.0

5 of the 5 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
ghcr.io/kubeservice-stack/customlimitrange-manager :v1.3.0	d3ed97d142d4	stdlib@go1.24.1	1.25.10
quay.io/jetstack/cert-manager-cainjector :v1.13.1	72072d492b43	stdlib@go1.20.8	1.25.10
quay.io/jetstack/cert-manager-controller :v1.13.1	6b83f55bd99e	stdlib@go1.20.8	1.25.10
quay.io/jetstack/cert-manager-ctl :v1.13.1	c10bde7ff9ad	stdlib@go1.20.8	1.25.10
quay.io/jetstack/cert-manager-webhook :v1.13.1	48ea4a77dfa7	stdlib@go1.20.8	1.25.10

Open the chart page →

5,941

kubeservice-ebpf-exporterkubservice-charts

1.2.1

1 of 1 See more

kubeservice-ebpf-exporter kubservice-charts 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
ghcr.io/cloudflare/ebpf_exporter :v2.3.0	75370b2ec2bb	stdlib@go1.21.5	1.25.10

Open the chart page →

545

kubeservice-namespace-node-affinitykubservice-charts

1.1.2

5 of 5 See more

kubeservice-namespace-node-affinity kubservice-charts 1.1.2

5 of the 5 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
dongjiang1989/ns-node-affinity :latest	451f7823723c	stdlib@go1.18.5	1.25.10
quay.io/jetstack/cert-manager-cainjector :v1.13.1	72072d492b43	stdlib@go1.20.8	1.25.10
quay.io/jetstack/cert-manager-controller :v1.13.1	6b83f55bd99e	stdlib@go1.20.8	1.25.10
quay.io/jetstack/cert-manager-ctl :v1.13.1	c10bde7ff9ad	stdlib@go1.20.8	1.25.10
quay.io/jetstack/cert-manager-webhook :v1.13.1	48ea4a77dfa7	stdlib@go1.20.8	1.25.10

Open the chart page →

6,872

kubeservice-scheduler-pluskubservice-charts

0.2.1

1 of 2 See more

kubeservice-scheduler-plus kubservice-charts 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
dongjiang1989/crane-scheduler-controller :main	f0055c05dbee	stdlib@go1.19.9	1.25.10

Open the chart page →

1,803

ingress-annotatorkuoss

0.3.0

1 of 1 See more

ingress-annotator kuoss 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
ghcr.io/kuoss/ingress-annotator :v0.3.0	ae179f65d869	stdlib@go1.24.6	1.25.10

Open the chart page →

480

kube-fencingkvaps

2.4.1

2 of 2 See more

kube-fencing kvaps 2.4.1

2 of the 2 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
ghcr.io/kvaps/kube-fencing-controller :v2.4.0	313edfec2fca	stdlib@go1.18.8	1.25.10
ghcr.io/kvaps/kube-fencing-switcher :v2.4.0	f8c378e63b78	stdlib@go1.18.8	1.25.10

Open the chart page →

2,538

linstorkvaps

1.14.0

4 of 11 See more

linstor kvaps 1.14.0

4 of the 11 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
ghcr.io/kvaps/linstor-controller :v1.14.0	00ce11c31087	stdlib@go1.15.14	1.25.10
ghcr.io/kvaps/linstor-csi :v1.14.0	087618d16b83	stdlib@go1.15.14	1.25.10
ghcr.io/kvaps/linstor-ha-controller :v1.14.0	8e7b44bbd123	stdlib@go1.15.14	1.25.10
ghcr.io/kvaps/linstor-stork :v1.14.0	5e409a6332b4	stdlib@go1.15.14	1.25.10

Open the chart page →

15,551

kymaroskymaros

0.6.9

1 of 1 See more

kymaros kymaros 0.6.9

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
ghcr.io/kymaroshq/kymaros :0.6.9	fb3b88633381	stdlib@go1.25.9	1.25.10

Open the chart page →

269

chibisafel4g

0.1.1

1 of 3 See more

chibisafe l4g 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-39823.

Container image	Digest	Package	Fixed in
chibisafe/chibisafe-server :latest	3da4fcbc1a18	stdlib@go1.20.12	1.25.10

Open the chart page →

5,657

Container images carrying it

4,537 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
cloudentity/openbanking-quickstart-consent-admin-portal :1.11.1	ee83cdd45b7b	stdlib@go1.15.2	1.25.10	1
cloudentity/openbanking-quickstart-consent-page :1.11.1	5728654cecb7	stdlib@go1.16.6	1.25.10	1
cloudentity/openbanking-quickstart-consent-self-service-portal :1.11.1	8ca94ae6acf4	stdlib@go1.15.2	1.25.10	1
cloudentity/openbanking-quickstart-financroo-tpp :1.11.1	c04eb10c77b7	stdlib@go1.15.2	1.25.10	1
cloudflare/cloudflared :2024.8.3	14d9c6b01b29	stdlib@go1.22.2-devel-cf	1.25.10	1
cloudflare/cloudflared :2024.5.0	5d5f70a59d5e	stdlib@go1.22.2-devel-cf	1.25.10	1
cloudflare/cloudflared :2023.10.0	c18744ae1767	stdlib@go1.20.6	1.25.10	1
cloudflare/cloudflared :2025.8.0	eb5c9324efe3	stdlib@go1.24.4	1.25.10	1
cloudnativelabs/kube-router :v1.6.0	0ec7cd73f43f	stdlib@go1.19.5	1.25.10	1
cloudposse/bastion :latest	0d9507e8a760	stdlib@go1.13.3	1.25.10	1
cmacrae/d2-prometheus-exporter :v0.1.0	fc5fecba436e	stdlib@go1.15	1.25.10	1
cmacrae/lgtm :0.1.0	dec8d490fe40	stdlib@go1.14.1	1.25.10	1
cockroachdb/cockroach-operator :v2.1.0	983312754620	stdlib@go1.13.14	1.25.10	1
codecov/self-hosted-gateway :24.4.1	de483faad6e5	stdlib@go1.22.0	1.25.10	1
codenotary/immudb :1.9.7	7c85d7cc4f22	stdlib@go1.18.10	1.25.10	1
codercom/code-server :4.11.0-debian	1e2cc688008e	stdlib@go1.14.4	1.25.10	1
codercom/code-server :3.10.2	47605610ad8d	stdlib@go1.14.4	1.25.10	1
coderenvs/coder-service :1.44.6	1deffc4670e6	stdlib@go1.21.9	1.25.10	1
codeskyblue/gohttpserver :latest	caa862590e34	stdlib@go1.16.3	1.25.10	1
cometbft/cometbft :v0.38.17	22c2ac018f40	stdlib@go1.22.11	1.25.10	1
conduction/agendaservice-php :latest	9cfeeb6c7c20	stdlib@go1.13.10	1.25.10	1
conduction/balance-registration-php :dev	c36094a41369	stdlib@go1.13.10	1.25.10	1
conduction/betaalservice-php :latest	ece1ab544c57	stdlib@go1.13.10	1.25.10	1
conduction/cgrc-php :dev	25415534d245	stdlib@go1.13.10	1.25.10	1
conduction/checkin-component-php :dev	3423845692c1	stdlib@go1.13.10	1.25.10	1
conduction/conduction-ui-php :dev	2744565516e8	stdlib@go1.13.10	1.25.10	1
conduction/contactmoment-component-php :dev	e1d4ad1e22a8	stdlib@go1.13.10	1.25.10	1
conduction/docparser-php :dev	b6f95c8ead7d	stdlib@go1.13.10	1.25.10	1
conduction/kvk-php :dev	8f177f9f8a7b	stdlib@go1.13.10	1.25.10	1
conduction/pan-php :dev	24f03c57568f	stdlib@go1.13.10	1.25.10	1
containous/maesh :v1.3.2	587162516502	stdlib@go1.14.4	1.25.10	1
contentsquareplatform/chproxy :v1.26.5	24555f22d4be	stdlib@go1.22.7	1.25.10	1
coredns/coredns :1.12.0	40384aa1f5ea	stdlib@go1.23.3	1.25.10	1
coredns/coredns :1.7.0	73ca82b4ce82	stdlib@go1.14.4	1.25.10	1
coredns/coredns :1.10.1	a0ead06651cf	stdlib@go1.20	1.25.10	1
cortezaproject/corteza :2024.9.6	0bcdcbcd3c63	stdlib@go1.24.1	1.25.10	1
cortezaproject/corteza :2024.9.0	8eb7a26605c9	stdlib@go1.19.13	1.25.10	1
cortezaproject/corteza :2024.9.4	cb9f200de5d2	stdlib@go1.24.1	1.25.10	1
cortezaproject/corteza-server-corredor :2024.9.4	4ea78dfe5364	stdlib@go1.23.5	1.25.10	1
countly/api :25.05.4	f4cc7447c4f5	stdlib@go1.19.4	1.25.10	1
countly/countly-server :25.05.4	e3c238248f99	stdlib@go1.21.11	1.25.10	1
countly/frontend :25.05.4	2acbc11499b6	stdlib@go1.19.4	1.25.10	1
craftypath/sops-operator :v0.8.0	402a0024c732	stdlib@go1.16.5	1.25.10	1
crossplane/crossplane :v0.12.0	66666e6963af	stdlib@go1.14.4	1.25.10	1
crossplane/oam-kubernetes-runtime :v0.0.3-71.g0f23590	0112171c45e3	stdlib@go1.13.14	1.25.10	1
crossplane/oam-kubernetes-runtime :v0.3.1-5.g11e1894	07b8b410dc76	stdlib@go1.13.15	1.25.10	1
crowdfox/external-service-operator :v1.1.0	6fa7e8063d27	stdlib@go1.14.2	1.25.10	1
csepulvedab/secret-sync :0.5	227a6f2b0ff8	stdlib@go1.19.4	1.25.10	1
csiplugin/csi-neonsan :v1.2.2	1fa83d45417f	stdlib@go1.14.4	1.25.10	1
csiplugin/snapshot-controller :v4.0.0	00fcc441ea9f	stdlib@go1.15	1.25.10	1