StackRadar

CVE-2026-39823

Medium

Advisory

Published 7 May 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.1
base score, highest
EPSS
0.003
25th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
4,033
of 17,813 indexed, latest versions
Container images
4,618
deployed by those charts
Fix available
1 of 2
affected packages

Bypass of meta content URL escaping causes XSS in html/template

Carried by container images the latest versions of 4,033 of 17,813 indexed charts deploy, on 4,618 images.

Affected packageAffected versionsFixed inImages
golang-1.19deb1.19.8-2no fix listed1
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+181 more1.25.104,618
OSV records
DEBIAN-CVE-2026-39823GO-2026-4982
Also known as
BIT-golang-2026-39823

Charts affected

4,033 by stars
ChartLatestAffected imagesRadar Score
jobs-managerraczylo-comVerified publisher0.1.151 of 1See more

jobs-manager raczylo-com 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container imageDigestPackageFixed in
ghcr.io/lukaszraczylo/jobs-manager-operator:0.1.15e6239e2838d7
stdlib@go1.25.0
1.25.10

Open the chart page →

501
kube-images-syncraczylo-comVerified publisher0.5.571 of 1See more

kube-images-sync raczylo-com 0.5.57

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container imageDigestPackageFixed in
ghcr.io/lukaszraczylo/kubernetes-images-sync-operator:0.5.57a424948c8143
stdlib@go1.25.5
1.25.10

Open the chart page →

415
velero-s3-deploymentradar-baseVerified publisher0.4.22 of 4See more

velero-s3-deployment radar-base 0.4.2

2 of the 4 container images this version deploys carry CVE-2026-39823.

Container imageDigestPackageFixed in
velero/velero:v1.9.0277fbfaf8dcf
stdlib@go1.18
1.25.10
velero/velero-plugin-for-aws:v1.5.03d2ea7aab32d
stdlib@go1.17.11
1.25.10

Open the chart page →

3,729
rbac-serverrbac-server1.19.11 of 1See more

rbac-server rbac-server 1.19.1

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/rbac-server:1.19.1df1adeb86679
stdlib@go1.23.12
1.25.10

Open the chart page →

705
rclonercloneVerified publisher2.2.01 of 1See more

rclone rclone 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container imageDigestPackageFixed in
rclone/rclone:1.6874c51b8817e5
stdlib@go1.23.3
1.25.10

Open the chart page →

1,680
redis-enterprise-operatorredis-enterprise-operatorVerified publisher7.13.4-121 of 1See more

redis-enterprise-operator redis-enterprise-operator 7.13.4-12

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container imageDigestPackageFixed in
redislabs/operator:7.4.2-2ecb101af0506
stdlib@go1.21.5
1.25.10

Open the chart page →

2,637
redis-sentinel-gatewayredis-sentinel-gatewayVerified publisher1.0.21 of 1See more

redis-sentinel-gateway redis-sentinel-gateway 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container imageDigestPackageFixed in
promzeus/redis-sentinel-gateway:v182f6d56e280b
stdlib@go1.22.6
1.25.10

Open the chart page →

2,710
redmineredmine-helm-chartVerified publisher0.2.61 of 1See more

redmine redmine-helm-chart 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container imageDigestPackageFixed in
library/redmine:6.1.3-trixief474a901faec
stdlib@go1.24.6
1.25.10

Open the chart page →

4,407
kminionredpanda-dataOfficialVerified publisher0.15.21 of 1See more

kminion redpanda-data 0.15.2

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container imageDigestPackageFixed in
redpandadata/kminion:v2.3.0c05fa976428e
stdlib@go1.25.8
1.25.10

Open the chart page →

924
docker-registry-mirrorregistry-mirror1.0.11 of 1See more

docker-registry-mirror registry-mirror 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container imageDigestPackageFixed in
library/registry:2.8.3a3d8aaa63ed8
stdlib@go1.20.8
1.25.10

Open the chart page →

550
reportportalreportportal-ioOfficialVerified publisher26.8.125 of 15See more

reportportal reportportal-io 26.8.12

5 of the 15 container images this version deploys carry CVE-2026-39823.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2025.7.23-debian-12-r08935e75fa5d1
stdlib@go1.24.2
1.25.10
library/postgres:18.4a02db8cac496
stdlib@go1.24.6
1.25.10
library/rabbitmq:4.3.4-managementeb5295d08332
stdlib@go1.22.2
1.25.10
reportportal/migrations:5.15.4464468240d7b
stdlib@go1.24.6
1.25.10
reportportal/service-index:5.15.1b1860ed33071
stdlib@go1.26.2
1.25.10

Open the chart page →

12,320
reservation-appreservation-app1.0.91 of 4See more

reservation-app reservation-app 1.0.9

1 of the 4 container images this version deploys carry CVE-2026-39823.

Container imageDigestPackageFixed in
library/postgres:9.6caddd35b05cd
stdlib@go1.16.7
1.25.10

Open the chart page →

6,649
resurfaceresurfaceioVerified publisher3.9.02 of 3See more

resurface resurfaceio 3.9.0

2 of the 3 container images this version deploys carry CVE-2026-39823.

Container imageDigestPackageFixed in
haproxytech/kubernetes-ingress:1.11.4c5f8a41ef0d4
stdlib@go1.22.2
1.25.10
resurfaceio/resurface:3.7.84d5cda2f64109
stdlib@go1.23.0
1.25.10

Open the chart page →

7,247
right-sizerright-sizer0.6.21 of 1See more

right-sizer right-sizer 0.6.2

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container imageDigestPackageFixed in
aavishay/right-sizer:0.6.23d7c4d79595c
stdlib@go1.25.8
1.25.10

Open the chart page →

291
backup-repository-serverriotkit-org4.0.01 of 1See more

backup-repository-server riotkit-org 4.0.0

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container imageDigestPackageFixed in
ghcr.io/riotkit-org/backup-repository:v4.0.0ab41ffa78f69
stdlib@go1.17.13
1.25.10

Open the chart page →

2,057
rke2-ingress-nginxrke2-charts4.15.1102 of 2See more

rke2-ingress-nginx rke2-charts 4.15.110

2 of the 2 container images this version deploys carry CVE-2026-39823.

Container imageDigestPackageFixed in
rancher/kube-webhook-certgen:v1.14.5-hardened26bb869baf40b
stdlib@go1.26.2
1.25.10
rancher/nginx-ingress-controller:v1.14.5-hardened26cbc1e932b5b
stdlib@go1.24.13
1.25.10

Open the chart page →

734
cloudflare-tunnelrlex0.8.01 of 1See more

cloudflare-tunnel rlex 0.8.0

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2023.10.0c18744ae1767
stdlib@go1.20.6
1.25.10

Open the chart page →

1,723
hcloud-fip-controllerrlex0.2.51 of 1See more

hcloud-fip-controller rlex 0.2.5

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container imageDigestPackageFixed in
cbeneke/hcloud-fip-controller:v0.4.1dc658078d7ba
stdlib@go1.15.3
1.25.10

Open the chart page →

2,964
prometheus-webhook-dingtalkrlex0.0.31 of 1See more

prometheus-webhook-dingtalk rlex 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container imageDigestPackageFixed in
timonwong/prometheus-webhook-dingtalk:v1.4.0a0fcc028bd8d
stdlib@go1.13.5
1.25.10

Open the chart page →

1,853
dev-feedrm3lVerified publisher3.1.21 of 3See more

dev-feed rm3l 3.1.2

1 of the 3 container images this version deploys carry CVE-2026-39823.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:11.4.3-debian-12-r08b3778160e34
stdlib@go1.22.6
1.25.10

Open the chart page →

9,969
kimai2robjuz5.0.141 of 2See more

kimai2 robjuz 5.0.14

1 of the 2 container images this version deploys carry CVE-2026-39823.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:10.6.12-debian-11-r1678847062532a
stdlib@go1.19.7
1.25.10

Open the chart page →

4,765
grafanaromanow-helm-chartsVerified publisher1.7.11 of 1See more

grafana romanow-helm-charts 1.7.1

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container imageDigestPackageFixed in
grafana/grafana:8.3.4cf81d2c753c8
stdlib@go1.17.6
1.25.10

Open the chart page →

2,843
jaeger-collectorromanow-helm-chartsVerified publisher1.5.01 of 1See more

jaeger-collector romanow-helm-charts 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container imageDigestPackageFixed in
jaegertracing/jaeger-collector:1.41.0ff81f0a9f63c
stdlib@go1.19.4
1.25.10

Open the chart page →

1,861
jaeger-queryromanow-helm-chartsVerified publisher1.5.01 of 1See more

jaeger-query romanow-helm-charts 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container imageDigestPackageFixed in
jaegertracing/jaeger-query:1.41.0b636f0f464bc
stdlib@go1.19.4
1.25.10

Open the chart page →

1,804
kube-state-metricsromanow-helm-chartsVerified publisher1.7.21 of 1See more

kube-state-metrics romanow-helm-charts 1.7.2

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container imageDigestPackageFixed in
bitnamilegacy/kube-state-metrics:204a3044b384b
stdlib@go1.24.5
1.25.10

Open the chart page →

2,725
logstashromanow-helm-chartsVerified publisher1.5.01 of 1See more

logstash romanow-helm-charts 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container imageDigestPackageFixed in
library/logstash:7.17.817a4f64e9cf5
stdlib@go1.19.3
1.25.10

Open the chart page →

7,607
node-exporterromanow-helm-chartsVerified publisher1.7.11 of 1See more

node-exporter romanow-helm-charts 1.7.1

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container imageDigestPackageFixed in
quay.io/prometheus/node-exporter:v1.8.1fa7fa12a57ef
stdlib@go1.22.3
1.25.10

Open the chart page →

845
postgresromanow-helm-chartsVerified publisher1.7.11 of 1See more

postgres romanow-helm-charts 1.7.1

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container imageDigestPackageFixed in
library/postgres:15dfbbb0ad8cab
stdlib@go1.24.6
1.25.10

Open the chart page →

1,270
prometheusromanow-helm-chartsVerified publisher1.7.21 of 1See more

prometheus romanow-helm-charts 1.7.2

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container imageDigestPackageFixed in
prom/prometheus:v2.52.05c435642ca4d
stdlib@go1.22.3
1.25.10

Open the chart page →

1,160
routehub-client-hubroutehub-helm1.0.02 of 3See more

routehub-client-hub routehub-helm 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-39823.

Container imageDigestPackageFixed in
eqalpha/keydb:latest6537505c4235
stdlib@go1.16.7
1.25.10
timescale/timescaledb-ha:pg164f288c0a5213
stdlib@go1.18.1
1.25.10

Open the chart page →

12,916
mealiertomik-helm-chartsVerified publisher0.0.21 of 1See more

mealie rtomik-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.2.1322369a5b748
stdlib@go1.24.4
1.25.10

Open the chart page →

4,020
kyoorubxkubeVerified publisher0.1.101 of 9See more

kyoo rubxkube 0.1.10

1 of the 9 container images this version deploys carry CVE-2026-39823.

Container imageDigestPackageFixed in
ghcr.io/zoriya/kyoo_transcoder:4.7.12dadea51a91e
stdlib@go1.23.4
1.25.10

Open the chart page →

30,977
rabbitmq-operatorsagikazarmarkVerified publisher0.0.31 of 1See more

rabbitmq-operator sagikazarmark 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container imageDigestPackageFixed in
rabbitmqoperator/cluster-operator:1.8.3231e7ce0e905
stdlib@go1.17
1.25.10

Open the chart page →

2,002
conference-appsalaboy1.0.04 of 7See more

conference-app salaboy 1.0.0

4 of the 7 container images this version deploys carry CVE-2026-39823.

Container imageDigestPackageFixed in
salaboy/agenda-service-0967b907d9920c99918e2b91b91937b3digest-pinnedce9ce8293e4e
stdlib@go1.20.1
1.25.10
salaboy/c4p-service-a3dc0474cbfa348afcdf47a8eee70ba9digest-pinnedbb64bf14467d
stdlib@go1.20.1
1.25.10
salaboy/frontend-go-1739aa83b5e69d4ccb8a5615830ae66cdigest-pinned1ff7c90845e4
stdlib@go1.20.1
1.25.10
salaboy/notifications-service-0e27884e01429ab7e350cb5dff61b525digest-pinned799c35f9f306
stdlib@go1.20.1
1.25.10

Open the chart page →

11,094
ntfysarab97Verified publisher0.1.71 of 1See more

ntfy sarab97 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container imageDigestPackageFixed in
binwiederhier/ntfy:v2.6.283e2e43d9956
stdlib@go1.20.5
1.25.10

Open the chart page →

1,773
uptime-kumasb-helm-charts0.4.01 of 1See more

uptime-kuma sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.24c364ef96aad
stdlib@go1.20.5
1.25.10

Open the chart page →

38,817
scaleway-csiscaleway-charts0.2.18 of 8See more

scaleway-csi scaleway-charts 0.2.1

8 of the 8 container images this version deploys carry CVE-2026-39823.

Container imageDigestPackageFixed in
scaleway/scaleway-csi:v0.3.411135998e31c
stdlib@go1.24.12
1.25.10
registry.k8s.io/sig-storage/csi-attacher:v4.9.05aaefc24f315
stdlib@go1.24.2
1.25.10
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.14.05244abbe87e0
stdlib@go1.24.2
1.25.10
registry.k8s.io/sig-storage/csi-provisioner:v5.3.0bb057f866177
stdlib@go1.24.2
1.25.10
registry.k8s.io/sig-storage/csi-resizer:v1.14.05e7cbb63fd49
stdlib@go1.24.2
1.25.10
registry.k8s.io/sig-storage/csi-snapshotter:v8.3.0bc7be893ecc3
stdlib@go1.24.2
1.25.10
registry.k8s.io/sig-storage/livenessprobe:v2.16.088092d100909
stdlib@go1.24.2
1.25.10
registry.k8s.io/sig-storage/snapshot-controller:v8.3.012c2da094b02
stdlib@go1.24.2
1.25.10

Open the chart page →

3,860
teamcityscalified-teamcityVerified publisher2026.2.01 of 3See more

teamcity scalified-teamcity 2026.2.0

1 of the 3 container images this version deploys carry CVE-2026-39823.

Container imageDigestPackageFixed in
library/postgres:14816cf7d06ec3
stdlib@go1.24.6
1.25.10

Open the chart page →

1,270
schemaheroschemahero1.4.01 of 1See more

schemahero schemahero 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container imageDigestPackageFixed in
schemahero/schemahero-manager:0.22.11609e1a05cd3
stdlib@go1.24.6
1.25.10

Open the chart page →

2,208
scienceboxsciencebox0.0.72 of 17See more

sciencebox sciencebox 0.0.7

2 of the 17 container images this version deploys carry CVE-2026-39823.

Container imageDigestPackageFixed in
cs3org/revad:v1.19.03b57a34a7dfd
stdlib@go1.17.3
1.25.10
osixia/openldap:1.5.018742e9c449c
stdlib@go1.15.5
1.25.10

Open the chart page →

6,599
iopsciencemeshVerified publisher0.4.01 of 2See more

iop sciencemesh 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-39823.

Container imageDigestPackageFixed in
cs3org/revad:v1.24.0e80a4d67b352
stdlib@go1.20.4
1.25.10

Open the chart page →

4,063
secrethorsecrethor1.1.21 of 1See more

secrethor secrethor 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container imageDigestPackageFixed in
bonovoo/secrethor:1.1.2bb93b68fcd17
stdlib@go1.24.2
1.25.10

Open the chart page →

529
securosecuroVerified publisher0.16.01 of 4See more

securo securo 0.16.0

1 of the 4 container images this version deploys carry CVE-2026-39823.

Container imageDigestPackageFixed in
pgvector/pgvector:pg16ccc6e83d6e35
stdlib@go1.24.6
1.25.10

Open the chart page →

3,594
selenosis-deployselenosisVerified publisher2.1.34 of 4See more

selenosis-deploy selenosis 2.1.3

4 of the 4 container images this version deploys carry CVE-2026-39823.

Container imageDigestPackageFixed in
alcounit/browser-controller:v1.0.093b7cdbab14b
stdlib@go1.25.0
1.25.10
alcounit/browser-service:v0.0.94bd10defc324
stdlib@go1.25.0
1.25.10
alcounit/browser-ui:v0.0.96a977c92ef27
stdlib@go1.25.0
1.25.10
alcounit/selenosis:v2.1.1d01a9dbbd943
stdlib@go1.25.0
1.25.10

Open the chart page →

1,580
karakeepself-hosters-by-nightVerified publisher2.5.11 of 1See more

karakeep self-hosters-by-night 2.5.1

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
stdlib@go1.23.10
1.25.10

Open the chart page →

5,240
sentry-k8ssentry-k8sVerified publisher1.4.13 of 11See more

sentry-k8s sentry-k8s 1.4.1

3 of the 11 container images this version deploys carry CVE-2026-39823.

Container imageDigestPackageFixed in
library/postgres:16f1c3376c26f2
stdlib@go1.24.6
1.25.10
library/redis:6.2.20-alpine77697a75da9f
stdlib@go1.18.2
1.25.10
ghcr.io/getsentry/sentry:26.7.27c5052aa4e3c
stdlib@go1.19.8
1.25.10

Open the chart page →

17,047
sentry-operatorsentry-operator1.2.51 of 1See more

sentry-operator sentry-operator 1.2.5

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container imageDigestPackageFixed in
ghcr.io/agjmills/sentry-operator:v1.2.500389ef6a00e
stdlib@go1.24.2
1.25.10

Open the chart page →

463
helm64-toolboxserdigital64Verified publisher0.4.01 of 1See more

helm64-toolbox serdigital64 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-39823.

Container imageDigestPackageFixed in
ghcr.io/automation64/toolbox/oraclelinux-9-toolbox:latest7af2216c7b9e
stdlib@go1.25.1
1.25.10

Open the chart page →

1,481
vuiseriohub1.0.62 of 3See more

vui seriohub 1.0.6

2 of the 3 container images this version deploys carry CVE-2026-39823.

Container imageDigestPackageFixed in
dserio83/velero-api:0.3.16b3d9115fee2
stdlib@go1.22.5
1.25.10
dserio83/velero-ui:0.3.1b4e1ec6664d3
stdlib@go1.23.7
1.25.10

Open the chart page →

11,654
session-manager-agentsession-manager-agent1.9.01 of 2See more

session-manager-agent session-manager-agent 1.9.0

1 of the 2 container images this version deploys carry CVE-2026-39823.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/session-manager-agent:1.9.0b9f23db99051
stdlib@go1.23.11
1.25.10

Open the chart page →

486

Container images carrying it

4,618 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/solo-io/gloo-envoy-wrapper:0.0.0-fork26ae185e835a
stdlib@go1.18.1
1.25.10
1
quay.io/spotahome/redis-operator:latest8c772955184e
stdlib@go1.20.7
1.25.10
1
quay.io/superq/draytek-exporter:v0.2.03b577bdceaae
stdlib@go1.25.4
1.25.10
1
quay.io/superq/smokeping-prober:v0.7.125d07dfc1d7e
stdlib@go1.20.5
1.25.10
1
quay.io/thanos/thanos:v0.40.1aae7b2b030ed
stdlib@go1.25.3
1.25.10
1
quay.io/thanos/thanos:v0.17.1e362f02ed304
stdlib@go1.15
1.25.10
1
quay.io/thanos/thanos:v0.36.1e542959e1b36
stdlib@go1.21.13
1.25.10
1
quay.io/tigera/operator:v1.20.1379efe0c2541
stdlib@go1.15.2
1.25.10
1
quay.io/tigera/operator:v1.15.1c6591da87aa8
stdlib@go1.15.2
1.25.10
1
quay.io/titansoft/imagepullsecret-patcher:v0.1421e6d6a155dc
stdlib@go1.13.15
1.25.10
1
quay.io/uswitch/kiam:v4.0be3a5846922d
stdlib@go1.13.8
1.25.10
1
quay.io/vouch/vouch-proxy:0.39d34e220de3cf
stdlib@go1.18.10
1.25.10
1
quay.io/wi_stefan/dsba-db-migrations:0.0.125b986cd14a08
stdlib@go1.18.9
1.25.10
1
quay.io/wraft/wraft-frontend:latestf1bbbd5e9bb9
stdlib@go1.23.10
1.25.10
1
quay.io/youniqx/heist:v1.1.209c43b3a9d98ae
stdlib@go1.22.7
1.25.10
1
quay.io/zncdatadev/airflow-operator:0.4.0b716ef483b75
stdlib@go1.25.8
1.25.10
1
quay.io/zncdatadev/commons-operator:0.4.01a353def9fe1
stdlib@go1.25.8
1.25.10
1
quay.io/zncdatadev/dolphinscheduler-operator:0.4.0d0a4e55eeb7f
stdlib@go1.25.8
1.25.10
1
quay.io/zncdatadev/hbase-operator:0.4.069e9a1b0daf8
stdlib@go1.25.8
1.25.10
1
quay.io/zncdatadev/hdfs-operator:0.4.0eb3c2928250e
stdlib@go1.25.8
1.25.10
1
quay.io/zncdatadev/hive-operator:0.4.0d66ba9149c22
stdlib@go1.25.8
1.25.10
1
quay.io/zncdatadev/kafka-operator:0.4.00a0b4c39c1ba
stdlib@go1.25.8
1.25.10
1
quay.io/zncdatadev/listener-csi-driver:0.4.0b69bed123b02
stdlib@go1.25.8
1.25.10
1
quay.io/zncdatadev/listener-operator:0.4.068b92dae8d75
stdlib@go1.25.8
1.25.10
1
quay.io/zncdatadev/nifi-operator:0.4.0bb4e26ff5e2f
stdlib@go1.25.8
1.25.10
1
quay.io/zncdatadev/secret-csi-driver:0.4.0604a7d98ab58
stdlib@go1.25.8
1.25.10
1
quay.io/zncdatadev/spark-k8s-operator:0.4.0d3f2b10c4a6d
stdlib@go1.25.8
1.25.10
1
quay.io/zncdatadev/superset-operator:0.4.0102e66e32218
stdlib@go1.25.8
1.25.10
1
quay.io/zncdatadev/trino-operator:0.4.04f516757aee3
stdlib@go1.25.8
1.25.10
1
quay.io/zncdatadev/zookeeper-operator:0.4.0b4f33d89ac45
stdlib@go1.25.8
1.25.10
1
registry.gitlab.com/arm-research/smarter/smarter-device-manager:v1.20.11826b984e75d4
stdlib@go1.19.1
1.25.10
1
registry.gitlab.com/arm-research/smarter/smarter-device-manager:v1.20.7864fc338571e
stdlib@go1.16.4
1.25.10
1
registry.gitlab.com/autokubeops/kube-image-webhook:v0.2.0fcf464708a21
stdlib@go1.18.1
1.25.10
1
registry.gitlab.com/av1o/go-prism:4fdcff7d3870c28e5f024b6947cb552d4b956ee27a6f84b81c4e
stdlib@go1.16.2
1.25.10
1
registry.gitlab.com/av1o/okd-webhook:v0.1.028c3e5eb2650
stdlib@go1.16
1.25.10
1
registry.gitlab.com/bitspur/rock8s/easy-olm-operator:0.0.1779454fea06c
stdlib@go1.19.10
1.25.10
1
registry.gitlab.com/bitspur/rock8s/images/kube-commands:3.1880ef8ceffc92
stdlib@go1.20.8
1.25.10
1
registry.gitlab.com/bitspur/rock8s/resource-binding-operator:0.1.063cf51392ce7
stdlib@go1.19.13
1.25.10
1
registry.gitlab.com/commento/commento:v1.8.0e0ab1fc86761
stdlib@go1.14.2
1.25.10
1
registry.gitlab.com/dyff/dyff-operator:0.24.20e9ca51627601
stdlib@go1.24.13
1.25.10
1
registry.gitlab.com/dyff/workflows-informer:0.4.4bfbadc49635d
stdlib@go1.20.14
1.25.10
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-backend:1.0.31c7afac3446d6
stdlib@go1.25.7
1.25.10
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
stdlib@go1.25.7
1.25.10
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/mongodb:4.4.5cf72810d33f5
stdlib@go1.15.8
1.25.10
1
registry.gitlab.com/gitlab-org/build/cng/cfssl-self-sign:v19.4.07757679afa1b
stdlib@go1.22.0
1.25.10
1
registry.gitlab.com/gitlab-org/ci-cd/gitlab-runner-pod-cleanup:latest4369f3ba1d9a
stdlib@go1.25.0
1.25.10
1
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator:0.5.136b19b72120e
stdlib@go1.16.14
1.25.10
1
registry.gitlab.com/lenitech/docker/keycloak-ppolicy:0.6.09895d6915075
stdlib@go1.25.7
1.25.10
1
registry.gitlab.com/lenitech/k8s-operator/keycloak-client:v0.6.19065cdd80035
stdlib@go1.24.5
1.25.10
1
registry.gitlab.com/parrotsec/project/parrot-mirror-docker:mainf91b602ca572
stdlib@go1.21.0
1.25.10
1

syft 1.42.1 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.