StackRadar

CVE-2026-39824

Unscored

Advisory

Published 22 May 2026In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.001
2nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,764
of 17,792 indexed, latest versions
Container images
4,327
deployed by those charts
Fix available
1 of 1
affected package

Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows

Carried by container images the latest versions of 3,764 of 17,792 indexed charts deploy, on 4,327 images.

Affected packageAffected versionsFixed inImages
golang.org/x/sysgolangv0.0.0-20180302081741-dd2ff4accc09, v0.0.0-20180810173357-98c5dad5d1a0, v0.0.0-20190209173611-3b5209105503, v0.0.0-20190215142949-d0b11bdaac8a+268 more0.44.04,327
OSV records
GO-2026-5024

Charts affected

3,764 by stars
ChartLatestAffected imagesRadar Score
mysqlgengxiankun-charts0.2.01 of 1See more

mysql gengxiankun-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
golang.org/x/sys@v0.1.0
0.44.0

Open the chart page →

463
geonetwork-k8sgeonetwork-k8sVerified publisher4.2.82 of 5See more

geonetwork-k8s geonetwork-k8s 4.2.8

2 of the 5 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
geonetwork/gn-cloud-ogc-api-records-service:4.2.8-020c9bb761f67
golang.org/x/sys@v0.9.0
0.44.0
postgis/postgis:11-2.5f479f6c3435e
golang.org/x/sys@v0.0.0-20210817142637-7d9622a276b7
0.44.0

Open the chart page →

34,893
istiogetindataVerified publisher1.11.12 of 2See more

istio getindata 1.11.1

2 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
gcr.io/istio-release/pilot:1.11.1c552478f8f11
golang.org/x/sys@v0.0.0-20210601080250-7ecdf8ef093b
0.44.0
gcr.io/istio-release/proxyv2:1.11.19538fabe49fd
golang.org/x/sys@v0.0.0-20210601080250-7ecdf8ef093b
0.44.0

Open the chart page →

16,854
ghostghostVerified publisher0.1.02 of 4See more

ghost ghost 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
library/ghost:5.79.083f7bf209844
golang.org/x/sys@v0.0.0-20220907062415-87db552b00fd
0.44.0
litestream/litestream:0.3c5a1e1b01916
golang.org/x/sys@v0.11.0
0.44.0

Open the chart page →

9,071
rabbitmqginger-society0.1.01 of 2See more

rabbitmq ginger-society 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
kbudde/rabbitmq-exporter:latest12f27d6d84e6
golang.org/x/sys@v0.18.0
0.44.0

Open the chart page →

1,514
gitanagitana1.4.01 of 1See more

gitana gitana 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ntakashi/gitana:1.4.04171ec641120
golang.org/x/sys@v0.0.0-20210927094055-39ccf1dd6fa6
0.44.0

Open the chart page →

3,478
github-rate-limits-prometheus-exportergithub-rate-limit-prometheus-exporterVerified publisher0.2.151 of 1See more

github-rate-limits-prometheus-exporter github-rate-limit-prometheus-exporter 0.2.15

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/kalgurn/grl-exporter:v3.2.0bd109b2bda38
golang.org/x/sys@v0.6.0
0.44.0

Open the chart page →

896
gitlab-goproxygitlab-goproxy0.2.21 of 1See more

gitlab-goproxy gitlab-goproxy 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/djcass44/gitlab-goproxy:v0.1.8a43323732181
golang.org/x/sys@v0.8.0
0.44.0

Open the chart page →

1,332
gitlab-mr-conformgitlab-mr-conform0.5.21 of 1See more

gitlab-mr-conform gitlab-mr-conform 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/chrxmvtik/gitlab-mr-conform:0.5.2b2eb79fc99cb
golang.org/x/sys@v0.41.0
0.44.0

Open the chart page →

428
apid-helpergkarthiks0.1.41 of 1See more

apid-helper gkarthiks 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
quay.io/gkarthics/apid-helper:v0.2.3d7d93debf1f4
golang.org/x/sys@v0.9.0
0.44.0

Open the chart page →

2,616
prometheus-container-resource-exportergkarthiks0.3.11 of 1See more

prometheus-container-resource-exporter gkarthiks 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
gkarthics/container-resource-exporter:latest6799af333e8a
golang.org/x/sys@v0.0.0-20200615200032-f1bc736245b1
0.44.0

Open the chart page →

2,218
glassflow-etlglassflowVerified publisher0.5.219 of 16See more

glassflow-etl glassflow 0.5.21

9 of the 16 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
library/nats:2.12.3-alpine88fe8e0e09d6
golang.org/x/sys@v0.39.0
0.44.0
library/postgres:17-alpine18cfe3ef5e68
golang.org/x/sys@v0.1.0
0.44.0
natsio/nats-box:0.19.28031d190c7ee
golang.org/x/sys@v0.32.0
0.44.0
natsio/nats-server-config-reloader:0.21.110ff229eaf52
golang.org/x/sys@v0.36.0
0.44.0
natsio/prometheus-nats-exporter:0.17.326c826662ac8
golang.org/x/sys@v0.33.0
0.44.0
otel/opentelemetry-collector-contrib:0.108.0923eb1cfae32
golang.org/x/sys@v0.24.0
0.44.0
ghcr.io/glassflow/glassflow-etl-be:v3.2.020f066d0f631
golang.org/x/sys@v0.42.0
0.44.0
ghcr.io/glassflow/glassflow-etl-k8s-operator:v3.2.1e70364e88629
golang.org/x/sys@v0.35.0
0.44.0
ghcr.io/glassflow/glassflow-etl-migration:v3.2.07db1a1bf3dae
golang.org/x/sys@v0.38.0
0.44.0

Open the chart page →

12,115
pgbouncerglassflowVerified publisher0.1.01 of 1See more

pgbouncer glassflow 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
bitnamilegacy/pgbouncer:1.23.192356da09704
golang.org/x/sys@v0.21.0
0.44.0

Open the chart page →

3,279
postgresqlglassflowVerified publisher0.1.91 of 1See more

postgresql glassflow 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
library/postgres:17-alpine18cfe3ef5e68
golang.org/x/sys@v0.1.0
0.44.0

Open the chart page →

494
glassflow-operatorglassflow-operatorVerified publisher0.8.51 of 3See more

glassflow-operator glassflow-operator 0.8.5

1 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/glassflow/glassflow-etl-k8s-operator:v3.2.1e70364e88629
golang.org/x/sys@v0.35.0
0.44.0

Open the chart page →

770
glauthglauthVerified publisher0.3.171 of 2See more

glauth glauth 0.3.17

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/nnstd/glauth:2.52e6e09fa77dd
golang.org/x/sys@v0.33.0
0.44.0

Open the chart page →

2,634
glidergliderVerified publisher0.1.51 of 1See more

glider glider 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
nadoo/glider:0.1638aadefbd607
golang.org/x/sys@v0.24.0
0.44.0

Open the chart page →

894
glpiglpi-chart0.1.11 of 3See more

glpi glpi-chart 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
library/mariadb:latestdd9b303aed4f
golang.org/x/sys@v0.1.0
0.44.0

Open the chart page →

12,359
gnp-stackgnp-stack0.0.57 of 14See more

gnp-stack gnp-stack 0.0.5

7 of the 14 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
grafana/grafana:12.2.135c41e0fd029
golang.org/x/sys@v0.36.0
0.44.0
rancher/local-path-provisioner:v0.0.329289da488b07
golang.org/x/sys@v0.31.0
0.44.0
ghcr.io/openconfig/gnmic:0.45.0d422a9ebd4a2
golang.org/x/sys@v0.41.0
0.44.0
quay.io/prometheus-operator/prometheus-operator:v0.85.0890b3bb05cf4
golang.org/x/sys@v0.35.0
0.44.0
quay.io/prometheus/node-exporter:v1.9.1d00a542e409e
golang.org/x/sys@v0.31.0
0.44.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.6.33d671cf20a35
golang.org/x/sys@v0.36.0
0.44.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.17.02bbc91556733
golang.org/x/sys@v0.34.0
0.44.0

Open the chart page →

7,683
go-file-servergo-file-server1.0.01 of 2See more

go-file-server go-file-server 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
goccx/go-file-server:latestf4b3ebea0303
golang.org/x/sys@v0.22.0
0.44.0

Open the chart page →

2,222
gofitgofit0.0.11 of 1See more

gofit gofit 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/bamaas/gofit:0.0.132b6a174b419
golang.org/x/sys@v0.19.0
0.44.0

Open the chart page →

650
goldpingergoldpinger1.1.31 of 1See more

goldpinger goldpinger 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
bloomberg/goldpinger:3.11.3a8ea8c61ff4c
golang.org/x/sys@v0.40.0
0.44.0

Open the chart page →

142
googly-logingoogly-login0.1.01 of 2See more

googly-login googly-login 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
library/postgres:16f1c3376c26f2
golang.org/x/sys@v0.1.0
0.44.0

Open the chart page →

1,649
gorsegorse-io0.4.23 of 4See more

gorse gorse-io 0.4.2

3 of the 4 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
zhenghaoz/gorse-master:0.4.12033046b432ec
golang.org/x/sys@v0.5.0
0.44.0
zhenghaoz/gorse-server:0.4.1239c565685b01
golang.org/x/sys@v0.5.0
0.44.0
zhenghaoz/gorse-worker:0.4.12f7739f64c9b0
golang.org/x/sys@v0.5.0
0.44.0

Open the chart page →

4,401
gotwaygotwayVerified publisher0.8.01 of 1See more

gotway gotway 0.8.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/gotway/gotway:v0.0.137ed73c1979ee
golang.org/x/sys@v0.0.0-20210603081109-ebe580a85c40
0.44.0

Open the chart page →

1,826
Governify-Bluejaygovernify0.1.02 of 12See more

Governify-Bluejay governify 0.1.0

2 of the 12 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
governify/dashboard:lateste83a17ba5038
golang.org/x/sys@v0.0.0-20210806184541-e5e7981a1069
0.44.0
library/mongo:latest5211c51171f5
golang.org/x/sys@v0.1.0
0.44.0

Open the chart page →

22,587
Governify-Falcongovernify0.1.02 of 10See more

Governify-Falcon governify 0.1.0

2 of the 10 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
governify/dashboard:lateste83a17ba5038
golang.org/x/sys@v0.0.0-20210806184541-e5e7981a1069
0.44.0
library/mongo:latest5211c51171f5
golang.org/x/sys@v0.1.0
0.44.0

Open the chart page →

24,379
goweeklygoweekly2.0.01 of 1See more

goweekly goweekly 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
zufardhiyaulhaq/goweekly:v2.0.008dcc130fbea
golang.org/x/sys@v0.0.0-20220702020025-31831981b65f
0.44.0

Open the chart page →

1,229
harborgpg-dev1.18.34 of 8See more

harbor gpg-dev 1.18.3

4 of the 8 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
goharbor/harbor-core:v2.14.3a30e5a8be3d9
golang.org/x/sys@v0.40.0
0.44.0
goharbor/harbor-jobservice:v2.14.3e2b0298e894d
golang.org/x/sys@v0.40.0
0.44.0
goharbor/harbor-registryctl:v2.14.3ddf6bb429eb6
golang.org/x/sys@v0.40.0
0.44.0
goharbor/trivy-adapter-photon:v2.14.35c6f7162804c
golang.org/x/sys@v0.28.0
0.44.0

Open the chart page →

3,406
ingress-nginxgpg-dev4.9.02 of 2See more

ingress-nginx gpg-dev 4.9.0

2 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.9.5b3aba22b1da8
golang.org/x/sys@v0.15.0
0.44.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20231011-8b53cabe0a7943503b45d
golang.org/x/sys@v0.13.0
0.44.0

Open the chart page →

2,316
jaegergpg-dev3.3.34 of 5See more

jaeger gpg-dev 3.3.3

4 of the 5 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
jaegertracing/jaeger-agent:1.53.00214a0ef24b1
golang.org/x/sys@v0.15.0
0.44.0
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
golang.org/x/sys@v0.0.0-20220907062415-87db552b00fd
0.44.0
jaegertracing/jaeger-collector:1.53.07f1269222903
golang.org/x/sys@v0.15.0
0.44.0
jaegertracing/jaeger-query:1.53.0049bb0d64ea3
golang.org/x/sys@v0.15.0
0.44.0

Open the chart page →

19,311
kube-prometheus-stackgpg-dev84.0.05 of 6See more

kube-prometheus-stack gpg-dev 84.0.0

5 of the 6 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
grafana/grafana:13.0.10f86bada30d6
golang.org/x/sys@v0.42.0
0.44.0
ghcr.io/jkroepke/kube-webhook-certgen:1.8.14f6da0256b1b
golang.org/x/sys@v0.43.0
0.44.0
quay.io/prometheus-operator/prometheus-operator:v0.90.152a6a92d915e
golang.org/x/sys@v0.42.0
0.44.0
quay.io/prometheus/node-exporter:v1.11.10f422f62c15f
golang.org/x/sys@v0.42.0
0.44.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
golang.org/x/sys@v0.39.0
0.44.0

Open the chart page →

4,303
kubernetes-dashboardgpg-dev7.5.04 of 5See more

kubernetes-dashboard gpg-dev 7.5.0

4 of the 5 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
kubernetesui/dashboard-api:1.7.060595892c2cf
golang.org/x/sys@v0.20.0
0.44.0
kubernetesui/dashboard-auth:1.1.307135c09e9ff
golang.org/x/sys@v0.18.0
0.44.0
kubernetesui/dashboard-metrics-scraper:1.1.17747d363c9fe
golang.org/x/sys@v0.17.0
0.44.0
kubernetesui/dashboard-web:1.4.04445b31a2c25
golang.org/x/sys@v0.20.0
0.44.0

Open the chart page →

6,078
metrics-servergpg-dev3.12.11 of 1See more

metrics-server gpg-dev 3.12.1

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
registry.k8s.io/metrics-server/metrics-server:v0.7.1db3800085a09
golang.org/x/sys@v0.16.0
0.44.0

Open the chart page →

1,078
opentelemetry-demogpg-dev0.33.88 of 27See more

opentelemetry-demo gpg-dev 0.33.8

8 of the 27 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
grafana/grafana:11.3.1fa801ab6e1ae
golang.org/x/sys@v0.25.0
0.44.0
jaegertracing/all-in-one:1.53.060e65bfffe1f
golang.org/x/sys@v0.15.0
0.44.0
otel/opentelemetry-collector-contrib:0.114.037fa87091cfa
golang.org/x/sys@v0.27.0
0.44.0
ghcr.io/open-feature/flagd:v0.11.1a7ea52f87446
golang.org/x/sys@v0.22.0
0.44.0
ghcr.io/open-telemetry/demo:1.12.0-productcatalogservice008b9b662289
golang.org/x/sys@v0.20.0
0.44.0
ghcr.io/open-telemetry/demo:1.12.0-checkoutservice380eccdc29e9
golang.org/x/sys@v0.20.0
0.44.0
ghcr.io/open-telemetry/demo:1.12.0-shippingservicea3ca4c02a5df
golang.org/x/sys@v0.15.0
0.44.0
quay.io/prometheus/prometheus:v3.0.03b9b2a15d376
golang.org/x/sys@v0.26.0
0.44.0

Open the chart page →

49,362
prometheusgpg-dev29.2.16 of 6See more

prometheus gpg-dev 29.2.1

6 of the 6 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-config-reloader:v0.90.1693faa0b8724
golang.org/x/sys@v0.42.0
0.44.0
quay.io/prometheus/alertmanager:v0.32.058e117eabcce
golang.org/x/sys@v0.42.0
0.44.0
quay.io/prometheus/node-exporter:v1.11.10f422f62c15f
golang.org/x/sys@v0.42.0
0.44.0
quay.io/prometheus/prometheus:v3.11.2cd37346c9745
golang.org/x/sys@v0.42.0
0.44.0
quay.io/prometheus/pushgateway:v1.11.249ed9fdf3780
golang.org/x/sys@v0.37.0
0.44.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
golang.org/x/sys@v0.39.0
0.44.0

Open the chart page →

3,281
prometheus-operator-admission-webhookgpg-dev0.18.12 of 2See more

prometheus-operator-admission-webhook gpg-dev 0.18.1

2 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/admission-webhook:v0.79.2d4c97a1b2d67
golang.org/x/sys@v0.28.0
0.44.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20221220-controller-v1.5.1-58-g787ea74b64d99688e5573
golang.org/x/sys@v0.1.0
0.44.0

Open the chart page →

1,685
thanosgpg-dev0.5.31 of 1See more

thanos gpg-dev 0.5.3

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
thanosio/thanos:v0.41.0cf3e9b292e43
golang.org/x/sys@v0.40.0
0.44.0

Open the chart page →

592
traefikgpg-dev39.0.81 of 1See more

traefik gpg-dev 39.0.8

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
library/traefik:v3.6.1334d5089d0b41
golang.org/x/sys@v0.41.0
0.44.0

Open the chart page →

1,280
velerogpg-dev12.0.01 of 1See more

velero gpg-dev 12.0.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
velero/velero:v1.18.0e4d1e79be2ee
golang.org/x/sys@v0.38.0
0.44.0

Open the chart page →

1,562
grafana-cloud-onboardinggrafana0.4.75 of 5See more

grafana-cloud-onboarding grafana 0.4.7

5 of the 5 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
grafana/beyla-k8s-cache:253b2f561cb1b
golang.org/x/sys@v0.39.0
0.44.0
ghcr.io/grafana/alloy-operator:1.8.1ae85d68749c7
golang.org/x/sys@v0.40.0
0.44.0
ghcr.io/grafana/helm-chart-toolbox-kubectl:0.1.1c137478627cc
golang.org/x/sys@v0.26.0
0.44.0
quay.io/prometheus/node-exporter:v1.11.10f422f62c15f
golang.org/x/sys@v0.42.0
0.44.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
golang.org/x/sys@v0.39.0
0.44.0

Open the chart page →

4,681
grafana-samplinggrafana1.1.72 of 2See more

grafana-sampling grafana 1.1.7

2 of the 2 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
grafana/alloy:v1.11.38c7256f412fe
golang.org/x/sys@v0.35.0
0.44.0
quay.io/prometheus-operator/prometheus-config-reloader:v0.81.0959d47672fbf
golang.org/x/sys@v0.31.0
0.44.0

Open the chart page →

3,370
mimir-openshift-experimentalgrafana2.1.03 of 4See more

mimir-openshift-experimental grafana 2.1.0

3 of the 4 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
grafana/mimir:2.0.080c1a8eb24dd
golang.org/x/sys@v0.0.0-20211216021012-1d35b9e2eb4e
0.44.0
minio/mc:RELEASE.2021-02-14T04-28-06Z2a374c124d44
golang.org/x/sys@v0.0.0-20210119212857-b64e53b001e4
0.44.0
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
golang.org/x/sys@v0.0.0-20210119212857-b64e53b001e4
0.44.0

Open the chart page →

17,780
pyroscope-monitoringgrafana0.1.15 of 6See more

pyroscope-monitoring grafana 0.1.1

5 of the 6 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
grafana/otel-lgtm:0.11.1009d8c3ce4f3a
golang.org/x/sys@v0.33.0
0.44.0
ghcr.io/grafana/alloy-operator:1.3.02088dcb22aaa
golang.org/x/sys@v0.33.0
0.44.0
ghcr.io/grafana/helm-chart-toolbox-kubectl:0.1.1c137478627cc
golang.org/x/sys@v0.26.0
0.44.0
quay.io/prometheus/node-exporter:v1.9.1d00a542e409e
golang.org/x/sys@v0.31.0
0.44.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.17.02bbc91556733
golang.org/x/sys@v0.34.0
0.44.0

Open the chart page →

8,269
snyk-exportergrafana0.1.01 of 1See more

snyk-exporter grafana 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
grafana/snyk_exporter:v1.4.1d3c9093401ca
golang.org/x/sys@v0.0.0-20201204225414-ed752295db88
0.44.0

Open the chart page →

669
prometheusgrafana-uxadax26.0.16 of 6See more

prometheus grafana-uxadax 26.0.1

6 of the 6 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
prom/prometheus:v3.0.1565ee8650122
golang.org/x/sys@v0.26.0
0.44.0
quay.io/prometheus-operator/prometheus-config-reloader:v0.78.2944b2c67345c
golang.org/x/sys@v0.26.0
0.44.0
quay.io/prometheus/alertmanager:v0.27.0e13b6ed5cb92
golang.org/x/sys@v0.16.0
0.44.0
quay.io/prometheus/node-exporter:v1.8.24032c6d5bfd7
golang.org/x/sys@v0.19.0
0.44.0
quay.io/prometheus/pushgateway:v1.10.07a4d0696a24e
golang.org/x/sys@v0.23.0
0.44.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.14.037d841299325
golang.org/x/sys@v0.26.0
0.44.0

Open the chart page →

5,312
grafregistratiecomponentgrafregistratiecomponent1.0.01 of 3See more

grafregistratiecomponent grafregistratiecomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/grafregistratiecomponent-php:latest35225eaa87ab
golang.org/x/sys@v0.0.0-20191022100944-742c48ecaeb7
0.44.0

Open the chart page →

7,519
grapple-installergrapple-installer0.3.221 of 1See more

grapple-installer grapple-installer 0.3.22

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
grpl/grapple-cli:0.2.127c00aafee6629
golang.org/x/sys@v0.21.0
0.44.0

Open the chart page →

7,956
grayloggraylogVerified publisher1.0.21 of 4See more

graylog graylog 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
library/mongo:85211c51171f5
golang.org/x/sys@v0.1.0
0.44.0

Open the chart page →

5,347
fasttrackmlgresearch0.1.01 of 1See more

fasttrackml gresearch 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39824.

Container imageDigestPackageFixed in
gresearch/fasttrackml:latest16d1228220fc
golang.org/x/sys@v0.19.0
0.44.0

Open the chart page →

1,398

Container images carrying it

4,327 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/salaboy/fmtok8s-agenda-service:v0.0.1-native6c5efe150958
golang.org/x/sys@v0.6.0
0.44.0
2
ghcr.io/salaboy/fmtok8s-c4p-service:v0.0.1-native3f7cc45fd20b
golang.org/x/sys@v0.6.0
0.44.0
2
ghcr.io/shopify/toxiproxy:2.7.0fc2d40f4904c
golang.org/x/sys@v0.13.0
0.44.0
2
ghcr.io/sigstore/scaffolding/createcerts7f59f7c08d1a
golang.org/x/sys@v0.37.0
0.44.0
2
ghcr.io/smarter-project/smarter-device-manager:v1.20.12228f7f44594a
golang.org/x/sys@v0.2.0
0.44.0
2
ghcr.io/spiffe/spiffe-csi-driver:0.2.79dfe4f0caff0
golang.org/x/sys@v0.31.0
0.44.0
2
ghcr.io/spiffe/spiffe-helper:0.11.01c92e5998ad3
golang.org/x/sys@v0.38.0
0.44.0
2
ghcr.io/squat/generic-device-plugin:36bfc606bba2064de6ede0ff2764cbb52edff70dba6f0b4cf6c8
golang.org/x/sys@v0.13.0
0.44.0
2
ghcr.io/stashed/stash-ui-server:v0.23.047cffbc65700
golang.org/x/sys@v0.31.0
0.44.0
2
ghcr.io/thecatlady/webhook:2.8.0f04718704dab
golang.org/x/sys@v0.0.0-20191228213918-04cbcbbfeed8
0.44.0
2
ghcr.io/wg-easy/wg-easy:15:15.4.00e7bc9d34e86
golang.org/x/sys@v0.32.0
0.44.0
2
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.1.1-1-ubi9d20bd62f0182
golang.org/x/sys@v0.7.0
0.44.0
2
public.ecr.aws/cloudnatix/llmariner/api-usage-server:1.16.08f9c32b866b0
golang.org/x/sys@v0.31.0
0.44.0
2
public.ecr.aws/cloudnatix/llmariner/cluster-manager-server:1.8.0364b3ff0fcb7
golang.org/x/sys@v0.31.0
0.44.0
2
public.ecr.aws/cloudnatix/llmariner/cluster-monitor-server:0.10.22d28f9e3eab4
golang.org/x/sys@v0.31.0
0.44.0
2
public.ecr.aws/cloudnatix/llmariner/file-manager-server:1.11.0301216788e93
golang.org/x/sys@v0.31.0
0.44.0
2
public.ecr.aws/cloudnatix/llmariner/inference-manager-engine:1.46.0c46f109c3d0b
golang.org/x/sys@v0.39.0
0.44.0
2
public.ecr.aws/cloudnatix/llmariner/job-manager-dispatcher:1.27.0582508903cb0
golang.org/x/sys@v0.31.0
0.44.0
2
public.ecr.aws/cloudnatix/llmariner/job-manager-server:1.27.0fe9de719f91e
golang.org/x/sys@v0.31.0
0.44.0
2
public.ecr.aws/cloudnatix/llmariner/model-manager-loader:1.27.026ac7263a823
golang.org/x/sys@v0.31.0
0.44.0
2
public.ecr.aws/cloudnatix/llmariner/model-manager-server:1.27.0c057dcdd9ef3
golang.org/x/sys@v0.31.0
0.44.0
2
public.ecr.aws/cloudnatix/llmariner/rbac-server:1.19.1df1adeb86679
golang.org/x/sys@v0.31.0
0.44.0
2
public.ecr.aws/cloudnatix/llmariner/user-manager-server:1.27.1628a14449241
golang.org/x/sys@v0.31.0
0.44.0
2
public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.16.11564359e1e0e
golang.org/x/sys@v0.3.0
0.44.0
2
public.ecr.aws/eks-distro/etcd-io/etcd:v3.5.6-eks-1-24-7efa6dee17ed2
golang.org/x/sys@v0.0.0-20210615035016-665e8c7367d1
0.44.0
2
public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.1.0-eks-1-25-latest701eea03388c
golang.org/x/sys@v0.3.0
0.44.0
2
public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v3.4.0-eks-1-25-latest460ee1a59fea
golang.org/x/sys@v0.3.0
0.44.0
2
public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.7.0-eks-1-25-lateste711da25e7a0
golang.org/x/sys@v0.3.0
0.44.0
2
public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.9.0-eks-1-25-latest8a305e162caa
golang.org/x/sys@v0.5.0
0.44.0
2
public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.7.0-eks-1-25-latestf4345e67df8f
golang.org/x/sys@v0.5.0
0.44.0
2
public.ecr.aws/p3k6k6h3/mdai-event-hub:0.1.1118cae836e9c7
golang.org/x/sys@v0.42.0
0.44.0
2
public.ecr.aws/p3k6k6h3/mdai-gateway:0.1.100dfb323978f6
golang.org/x/sys@v0.42.0
0.44.0
2
quay.io/argoproj/argocd:v2.14.115fc69e31c755
golang.org/x/sys@v0.25.0
0.44.0
2
quay.io/argoproj/argo-events:v1.9.11fa07b2c9ece6
golang.org/x/sys@v0.38.0
0.44.0
2
quay.io/argoproj/argo-workflows-crdinstaller:v4.1.394a031823f2a
golang.org/x/sys@v0.40.0
0.44.0
2
quay.io/brancz/kube-rbac-proxy:v0.20.0147cb28fea35
golang.org/x/sys@v0.36.0
0.44.0
2
quay.io/brancz/kube-rbac-proxy:v0.14.158d91a5faaf8
golang.org/x/sys@v0.5.0
0.44.0
2
quay.io/brancz/kube-rbac-proxy:v0.13.1738c854322f5
golang.org/x/sys@v0.0.0-20220728004956-3c1f35247d10
0.44.0
2
quay.io/brancz/kube-rbac-proxy:v0.18.1e6a323504999
golang.org/x/sys@v0.23.0
0.44.0
2
quay.io/cephcsi/cephcsi:v3.17.10b62db8afc9b
golang.org/x/sys@v0.43.0
0.44.0
2
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
golang.org/x/sys@v0.0.0-20220328115105-d36c6a25d886
0.44.0
2
quay.io/cilium/tetragon:v1.7.1afc9458ba4bc
golang.org/x/sys@v0.30.0
0.44.0
2
quay.io/coreos/etcd:v3.5.628cb0630cb85
golang.org/x/sys@v0.0.0-20210615035016-665e8c7367d1
0.44.0
2
quay.io/coreos/etcd:v3.6.12702d7b4881c6
golang.org/x/sys@v0.42.0
0.44.0
2
quay.io/dexidp/dex:v2.24.0c9b7f6d0d953
golang.org/x/sys@v0.0.0-20200122134326-e047566fdf82
0.44.0
2
quay.io/groundcover/grafana:9.3.18c65b333a3d3
golang.org/x/sys@v0.1.0
0.44.0
2
quay.io/iver-wharf/wharf-api:v5.2.0b736b345437d
golang.org/x/sys@v0.0.0-20220330033206-e17cdc41300f
0.44.0
2
quay.io/iver-wharf/wharf-cmd:v0.8.2e98d13459cdc
golang.org/x/sys@v0.0.0-20220422013727-9388b58f7150
0.44.0
2
quay.io/iver-wharf/wharf-provider-azuredevops:v3.0.12fe7e4dcffdf
golang.org/x/sys@v0.0.0-20220502124256-b6088ccd6cba
0.44.0
2
quay.io/iver-wharf/wharf-provider-github:v3.0.177a22cb45c2a
golang.org/x/sys@v0.0.0-20220502124256-b6088ccd6cba
0.44.0
2

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.