StackRadar

CVE-2026-39824

Unscored

Advisory

Published 22 May 2026In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.001
2nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,770
of 17,803 indexed, latest versions
Container images
4,347
deployed by those charts
Fix available
1 of 1
affected package

Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows

Carried by container images the latest versions of 3,770 of 17,803 indexed charts deploy, on 4,347 images.

Affected packageAffected versionsFixed inImages
golang.org/x/sysgolangv0.0.0-20180302081741-dd2ff4accc09, v0.0.0-20180810173357-98c5dad5d1a0, v0.0.0-20190209173611-3b5209105503, v0.0.0-20190215142949-d0b11bdaac8a+268 more0.44.04,347
OSV records
GO-2026-5024

Charts affected

3,770 by stars
ChartLatestAffected imagesRadar Score
user-data-ms-helm-chartnotesprojectchart0.1.01 of 2See more

user-data-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
golang.org/x/sys@v0.1.0
0.44.0

Open the chart page →

5,923
vault-helm-chartnotesprojectchart0.1.01 of 1See more

vault-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
library/vault:1.13.3f98ac9dd97b0
golang.org/x/sys@v0.6.0
0.44.0

Open the chart page →

2,257
notification-componentnotification-component1.0.01 of 4See more

notification-component notification-component 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/notification-component-php:latestcd9656e6bc2c
golang.org/x/sys@v0.0.0-20191022100944-742c48ecaeb7
0.44.0

Open the chart page →

7,539
clusterfannousefreakVerified publisher0.1.21 of 1See more

clusterfan nousefreak 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/nousefreak/clusterfan:v0.1.04ea05e2a7b57
golang.org/x/sys@v0.0.0-20211210111614-af8b64212486
0.44.0

Open the chart page →

1,791
giteanovum-rgi-charts2.1.31 of 3See more

gitea novum-rgi-charts 2.1.3

1 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
gitea/gitea:1.13.0d5ab14cd29af
golang.org/x/sys@v0.0.0-20200918174421-af09f7315aff
0.44.0

Open the chart page →

4,862
nfs-server-provisionernovum-rgi-charts1.1.21 of 1See more

nfs-server-provisioner novum-rgi-charts 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
quay.io/kubernetes_incubator/nfs-provisioner:v2.3.0f402e6039b3c
golang.org/x/sys@v0.0.0-20190801041406-cbf593c0f2f3
0.44.0

Open the chart page →

2,806
example-dev-toolsnoygal0.2.81 of 3See more

example-dev-tools noygal 0.2.8

1 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
linuxserver/cloud9:latest45c5fe102ff3
golang.org/x/sys@v0.0.0-20220114195835-da31bd327af9
0.44.0

Open the chart page →

27,560
nri-plugin-runtimenri-plugin-runtimeVerified publisher0.0.31 of 1See more

nri-plugin-runtime nri-plugin-runtime 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/bodgit/nri-plugin-runtime:v0.0.3130c0b1b6fa3
golang.org/x/sys@v0.39.0
0.44.0

Open the chart page →

154
cnaos-pvc-populatornutanix-helm-releasesVerified publisher1.1.0-174-prod1 of 2See more

cnaos-pvc-populator nutanix-helm-releases 1.1.0-174-prod

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/volume-data-source-validator:v1.0.0d35884236461
golang.org/x/sys@v0.0.0-20210831042530-f4d43177bf5e
0.44.0

Open the chart page →

1,838
nai-knative-istio-controllernutanix-helm-releasesVerified publisher1.13.12 of 2See more

nai-knative-istio-controller nutanix-helm-releases 1.13.1

2 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/net-istio/cmd/controller:v1.13.1a5b041ba3c9e
golang.org/x/sys@v0.16.0
0.44.0
gcr.io/knative-releases/knative.dev/net-istio/cmd/webhook:v1.13.1f066376eee17
golang.org/x/sys@v0.16.0
0.44.0

Open the chart page →

1,566
nai-knative-servingnutanix-helm-releasesVerified publisher1.13.14 of 4See more

nai-knative-serving nutanix-helm-releases 1.13.1

4 of the 4 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/serving/cmd/activator:v1.13.121f8e11a44bf
golang.org/x/sys@v0.16.0
0.44.0
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler:v1.13.134796e9f760b
golang.org/x/sys@v0.16.0
0.44.0
gcr.io/knative-releases/knative.dev/serving/cmd/controller:v1.13.153d9aa4d2c7a
golang.org/x/sys@v0.16.0
0.44.0
gcr.io/knative-releases/knative.dev/serving/cmd/webhook:v1.13.1700c69915dc7
golang.org/x/sys@v0.16.0
0.44.0

Open the chart page →

3,766
nutanix-flow-cninutanix-helm-releasesVerified publisher1.1.04 of 7See more

nutanix-flow-cni nutanix-helm-releases 1.1.0

4 of the 7 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
library/nats:2.10-alpineb83efabe3e7d
golang.org/x/sys@v0.32.0
0.44.0
natsio/nats-box:0.14.1a67913df95f1
golang.org/x/sys@v0.12.0
0.44.0
natsio/nats-server-config-reloader:0.13.0b3359eeb10bf
golang.org/x/sys@v0.12.0
0.44.0
ghcr.io/k8snetworkplumbingwg/multus-cni:v4.1.39751856cacc8
golang.org/x/sys@v0.18.0
0.44.0

Open the chart page →

4,997
firecrawlobeoneVerified publisher3.0.61 of 5See more

firecrawl obeone 3.0.6

1 of the 5 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/firecrawl/nuq-postgres:latestf9388bd25ae2
golang.org/x/sys@v0.1.0
0.44.0

Open the chart page →

10,311
lensoci-ai-incubations0.1.1411 of 16See more

lens oci-ai-incubations 0.1.14

11 of the 16 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
alpine/k8s:1.31.106dbe6f391eda
golang.org/x/sys@v0.33.0
0.44.0
grafana/grafana:12.1.1a1701c218024
golang.org/x/sys@v0.33.0
0.44.0
library/postgres:134689940c6838
golang.org/x/sys@v0.1.0
0.44.0
quay.io/jetstack/cert-manager-cainjector:v1.13.2858fee0c4af0
golang.org/x/sys@v0.13.0
0.44.0
quay.io/jetstack/cert-manager-controller:v1.13.29c67cf8c92d8
golang.org/x/sys@v0.13.0
0.44.0
quay.io/jetstack/cert-manager-webhook:v1.13.20a9470447ebf
golang.org/x/sys@v0.13.0
0.44.0
quay.io/prometheus-operator/prometheus-config-reloader:v0.85.0ebb560bcb6bd
golang.org/x/sys@v0.35.0
0.44.0
quay.io/prometheus/prometheus:v3.5.063805ebb8d2b
golang.org/x/sys@v0.33.0
0.44.0
quay.io/prometheus/pushgateway:v1.11.103738d278e08
golang.org/x/sys@v0.30.0
0.44.0
registry.k8s.io/ingress-nginx/controller:v1.13.21f7eaeb01933
golang.org/x/sys@v0.35.0
0.44.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.6.2050a34002d5b
golang.org/x/sys@v0.35.0
0.44.0

Open the chart page →

17,257
ocisocis-community0.1.01 of 1See more

ocis ocis-community 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
owncloud/ocis:8.0.1b38fd8fdd58f
golang.org/x/sys@v0.40.0
0.44.0

Open the chart page →

2,356
argocd-agent-addonocm-helm-chartsVerified publisher0.29.01 of 2See more

argocd-agent-addon ocm-helm-charts 0.29.0

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
quay.io/argoprojlabs/argocd-operator:v0.18.0a09814522a72
golang.org/x/sys@v0.42.0
0.44.0

Open the chart page →

671
cluster-gateway-addon-managerocm-helm-chartsVerified publisher1.4.01 of 1See more

cluster-gateway-addon-manager ocm-helm-charts 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
oamdev/cluster-gateway-addon-manager:v1.4.01bcae00bd7b0
golang.org/x/sys@v0.0.0-20211029165221-6e7872819dc8
0.44.0

Open the chart page →

1,607
cluster-managerocm-helm-chartsVerified publisher1.3.11 of 1See more

cluster-manager ocm-helm-charts 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
quay.io/open-cluster-management/registration-operator:v1.3.1df6c926a2b54
golang.org/x/sys@v0.42.0
0.44.0

Open the chart page →

822
cluster-proxyocm-helm-chartsVerified publisher0.12.01 of 1See more

cluster-proxy ocm-helm-charts 0.12.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
quay.io/open-cluster-management/cluster-proxy:v0.12.035f9c3ad644a
golang.org/x/sys@v0.18.0
0.44.0

Open the chart page →

1,350
dynamic-scoring-frameworkocm-helm-chartsVerified publisher0.1.02 of 2See more

dynamic-scoring-framework ocm-helm-charts 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
quay.io/open-cluster-management/dynamic-scoring-addon:latest7e571a08ec1a
golang.org/x/sys@v0.38.0
0.44.0
quay.io/open-cluster-management/dynamic-scoring-controller:latest587f5bc8f2ed
golang.org/x/sys@v0.38.0
0.44.0

Open the chart page →

996
klusterletocm-helm-chartsVerified publisher1.3.11 of 1See more

klusterlet ocm-helm-charts 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
quay.io/open-cluster-management/registration-operator:v1.3.1df6c926a2b54
golang.org/x/sys@v0.42.0
0.44.0

Open the chart page →

822
kueue-addonocm-helm-chartsVerified publisher0.1.41 of 1See more

kueue-addon ocm-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
quay.io/open-cluster-management/kueue-addon:v0.1.47f728514fead
golang.org/x/sys@v0.32.0
0.44.0

Open the chart page →

1,619
multicluster-controlplaneocm-helm-chartsVerified publisher0.8.01 of 1See more

multicluster-controlplane ocm-helm-charts 0.8.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
quay.io/open-cluster-management/multicluster-controlplane:latest9888240f644b
golang.org/x/sys@v0.42.0
0.44.0

Open the chart page →

626
multicluster-meshocm-helm-chartsVerified publisher0.0.21 of 1See more

multicluster-mesh ocm-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
quay.io/open-cluster-management/multicluster-mesh-addon:latest3e010e1188f1
golang.org/x/sys@v0.0.0-20220222160653-b146bcec3beb
0.44.0

Open the chart page →

2,131
octantoctant0.1.861 of 1See more

octant octant 0.1.86

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/mydecisive/octant:0.1.86ebbd44abae6c
golang.org/x/sys@v0.42.0
0.44.0

Open the chart page →

566
my-bloody-jenkinsodavid0.1.2181 of 1See more

my-bloody-jenkins odavid 0.1.218

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
golang.org/x/sys@v0.13.0
0.44.0

Open the chart page →

5,812
cmsmsoleds-helm-chartsVerified publisher0.1.61 of 1See more

cmsms oleds-helm-charts 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:11.4.7-debian-12-r290dc6acb7b2e
golang.org/x/sys@v0.21.0
0.44.0

Open the chart page →

2,899
hive-metastoreolehrgfVerified publisher0.1.01 of 1See more

hive-metastore olehrgf 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
golang.org/x/sys@v0.0.0-20191112214154-59a1497f0cea
0.44.0

Open the chart page →

8,549
exposecontrollerolli-aiVerified publisher1.0.51 of 1See more

exposecontroller olli-ai 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
olliai/exposecontroller:1.0.5a470d96525e4
golang.org/x/sys@v0.0.0-20190826190057-c7b8b68b1456
0.44.0

Open the chart page →

2,861
k8s-replicatorolli-aiVerified publisher1.3.01 of 1See more

k8s-replicator olli-ai 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
olliai/k8s-replicator:1.3.05716f2a8bd4c
golang.org/x/sys@v0.0.0-20190826190057-c7b8b68b1456
0.44.0

Open the chart page →

2,825
apicurioone-acre-fundVerified publisher2.3.02 of 5See more

apicurio one-acre-fund 2.3.0

2 of the 5 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:14.4.0-debian-11-r237e7ebb082031
golang.org/x/sys@v0.0.0-20210817142637-7d9622a276b7
0.44.0
jwilder/dockerize:latestf94fb59fb4f6
golang.org/x/sys@v0.38.0
0.44.0

Open the chart page →

18,671
nocodbone-acre-fundVerified publisher0.4.62 of 3See more

nocodb one-acre-fund 0.4.6

2 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
library/postgres:alpined3e1620b530c
golang.org/x/sys@v0.1.0
0.44.0
nocodb/nocodb:0.258.06779a4ddedf2
golang.org/x/sys@v0.15.0
0.44.0

Open the chart page →

4,241
onedevonedev11.9.01 of 1See more

onedev onedev 11.9.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
1dev/server:11.9.0cd5b12fe5471
golang.org/x/sys@v0.32.0
0.44.0

Open the chart page →

6,148
one-green-coreone-green-coreVerified publisher0.0.73 of 8See more

one-green-core one-green-core 0.0.7

3 of the 8 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
grafana/grafana:8.5.3ecc1b80b8ca2
golang.org/x/sys@v0.0.0-20220114195835-da31bd327af9
0.44.0
library/influxdb:2.0.8ba10ac9ba17a
golang.org/x/sys@v0.0.0-20210124154548-22da62e12c0c
0.44.0
library/telegraf:1.20.428e98eece020
golang.org/x/sys@v0.0.0-20211004093028-2c5d950f24ef
0.44.0

Open the chart page →

9,582
ontoserverontoserverVerified publisher0.5.21 of 2See more

ontoserver ontoserver 0.5.2

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
library/postgres:16f1c3376c26f2
golang.org/x/sys@v0.1.0
0.44.0

Open the chart page →

1,686
onyx-stackonyx0.3.14 of 12See more

onyx-stack onyx 0.3.1

4 of the 12 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
vespaengine/vespa:8.526.1569b160f58211
golang.org/x/sys@v0.32.0
0.44.0
ghcr.io/kedacore/keda:2.17.272dc058e478d
golang.org/x/sys@v0.32.0
0.44.0
ghcr.io/kedacore/keda-admission-webhooks:2.17.2c8227c6edb4d
golang.org/x/sys@v0.32.0
0.44.0
ghcr.io/kedacore/keda-metrics-apiserver:2.17.2f312f50ddc57
golang.org/x/sys@v0.32.0
0.44.0

Open the chart page →

6,697
oom-traceroom-tracerVerified publisher0.1.01 of 1See more

oom-tracer oom-tracer 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/eminaktas/oom-tracer:v0.1.0c90ca8389c87
golang.org/x/sys@v0.35.0
0.44.0

Open the chart page →

1,125
opa-nginxopa-nginx0.0.31 of 2See more

opa-nginx opa-nginx 0.0.3

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
openpolicyagent/opa:0.53.16a58dea59933
golang.org/x/sys@v0.8.0
0.44.0

Open the chart page →

2,207
raspberrymaticopenccuVerified publisher3.83.61 of 1See more

raspberrymatic openccu 3.83.6

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/jens-maus/raspberrymatic:3.83.6.202508244b22b4f407c4
golang.org/x/sys@v0.33.0
0.44.0

Open the chart page →

2,424
anchore-engineopencloudcx1.13.01 of 2See more

anchore-engine opencloudcx 1.13.0

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
anchore/anchore-engine:v0.10.0bde9eedf639d
golang.org/x/sys@v0.0.0-20200602225109-6fdc65e7d980
0.44.0

Open the chart page →

18,034
bbsimopencord4.8.111 of 1See more

bbsim opencord 4.8.11

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
voltha/bbsim:1.16.7d90403d58016
golang.org/x/sys@v0.0.0-20210510120138-977fb7262007
0.44.0

Open the chart page →

3,918
bbsim-sadis-serveropencord0.3.51 of 1See more

bbsim-sadis-server opencord 0.3.5

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
voltha/bbsim-sadis-server:0.4.0762b272d439e
golang.org/x/sys@v0.0.0-20210615035016-665e8c7367d1
0.44.0

Open the chart page →

3,731
nem-monitoringopencord1.3.221 of 9See more

nem-monitoring opencord 1.3.22

1 of the 9 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
prom/prometheus:v2.13.10a8caa2e9f19
golang.org/x/sys@v0.0.0-20191010194322-b09406accb47
0.44.0

Open the chart page →

4,620
volthaopencord2.14.02 of 2See more

voltha opencord 2.14.0

2 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
voltha/voltha-ofagent-go:2.1.68feb9ef89e97
golang.org/x/sys@v0.0.0-20210615035016-665e8c7367d1
0.44.0
voltha/voltha-rw-core:3.4.87a325316fe59
golang.org/x/sys@v0.0.0-20210615035016-665e8c7367d1
0.44.0

Open the chart page →

3,825
voltha-adapter-openoltopencord2.14.01 of 1See more

voltha-adapter-openolt opencord 2.14.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
voltha/voltha-openolt-adapter:4.5.16d6d79c08350a
golang.org/x/sys@v0.21.0
0.44.0

Open the chart page →

898
voltha-adapter-openonuopencord2.14.01 of 1See more

voltha-adapter-openonu opencord 2.14.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
voltha/voltha-openonu-adapter-go:2.12.25d8f2eb5f2a7e
golang.org/x/sys@v0.29.0
0.44.0

Open the chart page →

844
voltha-infraopencord2.14.02 of 10See more

voltha-infra opencord 2.14.0

2 of the 10 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
opencord/onos-classic-helm-utils:0.1.00d693ba85fd6
golang.org/x/sys@v0.0.0-20210225134936-a50acf3fe073
0.44.0
voltha/bbsim-sadis-server:0.3.5259fc3a03f4e
golang.org/x/sys@v0.0.0-20210615035016-665e8c7367d1
0.44.0

Open the chart page →

41,148
voltha-stackopencord2.14.04 of 4See more

voltha-stack opencord 2.14.0

4 of the 4 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
voltha/voltha-ofagent-go:2.1.68feb9ef89e97
golang.org/x/sys@v0.0.0-20210615035016-665e8c7367d1
0.44.0
voltha/voltha-openolt-adapter:4.5.16d6d79c08350a
golang.org/x/sys@v0.21.0
0.44.0
voltha/voltha-openonu-adapter-go:2.12.25d8f2eb5f2a7e
golang.org/x/sys@v0.29.0
0.44.0
voltha/voltha-rw-core:3.4.87a325316fe59
golang.org/x/sys@v0.0.0-20210615035016-665e8c7367d1
0.44.0

Open the chart page →

5,567
everest-db-namespaceopeneverestVerified publisher1.16.21 of 1See more

everest-db-namespace openeverest 1.16.2

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
percona/everest-helmtools:0.0.1904458d04a18
golang.org/x/sys@v0.31.0
0.44.0

Open the chart page →

769
federated-gatewayopenfaas0.1.01 of 1See more

federated-gateway openfaas 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/openfaasltd/federated-gateway:0.2.39066d7b3e6a1
golang.org/x/sys@v0.15.0
0.44.0

Open the chart page →

1,240

Container images carrying it

4,347 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
prom/prometheus:v2.52.05c435642ca4d
golang.org/x/sys@v0.19.0
0.44.0
2
prom/prometheus:v2.37.98176adea328e
golang.org/x/sys@v0.5.0
0.44.0
2
prom/prometheus:v2.48.1a67e5e402ff5
golang.org/x/sys@v0.13.0
0.44.0
2
prom/prometheus:v2.21.0d43417c260e5
golang.org/x/sys@v0.0.0-20200821140526-fda516888d29
0.44.0
2
prom/pushgateway:v1.3.0c0d39b8d4cfe
golang.org/x/sys@v0.0.0-20200625212154-ddb9806d33ae
0.44.0
2
qingcloud/hostnic-plus:v1.0.34cd5366a9f51
golang.org/x/sys@v0.0.0-20210603081109-ebe580a85c40
0.44.0
2
qmcgaw/ddns-updater:2.10.0:v2.10.03e2aa558946b
golang.org/x/sys@v0.43.0
0.44.0
2
rajnandan1/kener:3.2.1930407afca731
golang.org/x/sys@v0.0.0-20220715151400-c0bba94af5f8
0.44.0
2
rancher/k3s:v1.26.0-k3s19380f5dbae9a
golang.org/x/sys@v0.0.0-20211116061358-0a5406a5449c
0.44.0
2
rancher/kine:v0.11.412889bbcd1e8
golang.org/x/sys@v0.15.0
0.44.0
2
rancher/kubectl:v1.36.206c7a7a97727
golang.org/x/sys@v0.40.0
0.44.0
2
rancher/local-path-provisioner:v0.0.3534ff0847cc47
golang.org/x/sys@v0.31.0
0.44.0
2
rancher/local-path-provisioner:v0.0.299bebefa0b908
golang.org/x/sys@v0.22.0
0.44.0
2
rancher/system-upgrade-controller:v0.20.1aaf4dbf64057
golang.org/x/sys@v0.43.0
0.44.0
2
rclone/rclone:1.6874c51b8817e5
golang.org/x/sys@v0.22.0
0.44.0
2
ribbybibby/ssl-exporter:2.4.2718abe7f5e79
golang.org/x/sys@v0.0.0-20220712014510-0a85c31ab51e
0.44.0
2
rookout/controller:latest4451a6f6b8ec
golang.org/x/sys@v0.11.0
0.44.0
2
rookout/data-on-prem:latest51c0fce64467
golang.org/x/sys@v0.11.0
0.44.0
2
rss3/op-batcher:a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8adae8a5bdd7a6
golang.org/x/sys@v0.15.0
0.44.0
2
rss3/op-proposer:a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8aa4059dd32c48
golang.org/x/sys@v0.15.0
0.44.0
2
samcm/ethereum-metrics-exporter:0.29.2:latest91a2d9a015c1
golang.org/x/sys@v0.36.0
0.44.0
2
scaleway/cert-manager-webhook-scaleway:v0.0.1dcc14608d000
golang.org/x/sys@v0.0.0-20200622214017-ed371f2e16b4
0.44.0
2
sikalabs/hello-world-server:latest5f49bf889a64
golang.org/x/sys@v0.15.0
0.44.0
2
squareup/ghostunnel:v1.5.270f4cf270425
golang.org/x/sys@v0.0.0-20191010194322-b09406accb47
0.44.0
2
starrocks/operator:v1.11.78c20435a7579
golang.org/x/sys@v0.13.0
0.44.0
2
statping/statping:v0.90.74e874da513a5c
golang.org/x/sys@v0.0.0-20200724161237-0e2f3a69832c
0.44.0
2
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
golang.org/x/sys@v0.6.0
0.44.0
2
temporalio/server:1.22.4c0a44c26397b
golang.org/x/sys@v0.14.0
0.44.0
2
temporalio/ui:2.16.2af9c9349708f
golang.org/x/sys@v0.8.0
0.44.0
2
thanosio/thanos:v0.41.0cf3e9b292e43
golang.org/x/sys@v0.40.0
0.44.0
2
thesisrobot/loop:v0.11.1-beta89ae07e787ca
golang.org/x/sys@v0.0.0-20200202164722-d101bd2416d5
0.44.0
2
thesisrobot/pool:v0.3.3-alpha2d1c388a4bda
golang.org/x/sys@v0.0.0-20200202164722-d101bd2416d5
0.44.0
2
thomasnyambati/aws-service-events-exporter:1.0.01e18a0944ceb
golang.org/x/sys@v0.0.0-20201214210602-f9fddec55a1e
0.44.0
2
thomasnyambati/labelsmanager-controller:1.0.0148ae3f99fea
golang.org/x/sys@v0.0.0-20190826190057-c7b8b68b1456
0.44.0
2
thoughtmachine/aws-service-quotas-exporter:v1.3.2c6065ba55c72
golang.org/x/sys@v0.1.0
0.44.0
2
timescale/timescaledb:latest-pg156343bdc87ca1
golang.org/x/sys@v0.1.0
0.44.0
2
tkpd/gripmock:1.10.174441dadcfbd
golang.org/x/sys@v0.0.0-20210510120138-977fb7262007
0.44.0
2
uffizzi/controller:latest0344805f267b
golang.org/x/sys@v0.5.0
0.44.0
2
uselagoon/docker-host:v3.6.12c89ed939b8b
golang.org/x/sys@v0.32.0
0.44.0
2
victoriametrics/vmalert:v1.95.1a83e5db0897a
golang.org/x/sys@v0.14.0
0.44.0
2
voltha/voltha-ofagent-go:2.1.68feb9ef89e97
golang.org/x/sys@v0.0.0-20210615035016-665e8c7367d1
0.44.0
2
voltha/voltha-openolt-adapter:4.5.16d6d79c08350a
golang.org/x/sys@v0.21.0
0.44.0
2
voltha/voltha-openonu-adapter-go:2.12.25d8f2eb5f2a7e
golang.org/x/sys@v0.29.0
0.44.0
2
voltha/voltha-rw-core:3.4.87a325316fe59
golang.org/x/sys@v0.0.0-20210615035016-665e8c7367d1
0.44.0
2
weblate/weblate:4.2.2-169c160d37a3c
golang.org/x/sys@v0.0.0-20190531175056-4c3a928424d2
0.44.0
2
xelalex/dregsy:0.4.3574054e1c417
golang.org/x/sys@v0.0.0-20220422013727-9388b58f7150
0.44.0
2
yzhou442/equiz:latesta3f7ca69e28d
golang.org/x/sys@v0.2.0
0.44.0
2
zhenghaoz/gorse-master:0.4.12033046b432ec
golang.org/x/sys@v0.5.0
0.44.0
2
zhenghaoz/gorse-server:0.4.1239c565685b01
golang.org/x/sys@v0.5.0
0.44.0
2
zhenghaoz/gorse-worker:0.4.12f7739f64c9b0
golang.org/x/sys@v0.5.0
0.44.0
2

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.